A method for detecting a malfunction or defect of a sensor of a vehicle safety device uses a control unit of the vehicle safety device and at least one self-testing sensor which is separate from the control unit and transmits measuring values to the control unit. The following steps are performed: a) The sensor performs the self-test of the sensor, wherein the measuring section of the sensor is activated in a simulated manner in order to generate a test measuring value in response to the simulated activation, b) a signal is transmitted to the control unit which includes at least one of: a ratio of test measuring value to intensity of the simulated activation, a deviation of the test measuring value from the simulated activation and a test measuring value, c) it is checked by means of the control unit whether at least one of the ratio, the deviation and the measuring value is plausible, d) the control unit determines that the sensor has malfunctioned or is defective if at least one on the ratio, the deviation and the test measuring value is considered to be non-plausible.

A sensor system for a vehicle, including a first sensor that detects at least one collision-relevant physical variable and outputs at least one corresponding first sensor signal, and at least one second sensor that, independently of the first sensor, detects at least one collision-relevant physical variable and outputs at least one corresponding second sensor signal, and an evaluation and control unit that receives the at least one first sensor signal and the at least one second sensor signal and evaluates them for the collision detection. A method is also described for monitoring a sensor. The evaluation and control unit uses at least one second comparison signal that is based on the at least one second sensor signal of the at least one second sensor to monitor the first sensor.

A controller for triggering a pyrotechnic component of a vehicle is designed to determine and store a trigger status of the pyrotechnic component. The trigger status exhibits a triggered state or a non-triggered state. The controller is further designed, if the trigger status exhibits the non-triggered state, to allow operation of the controller with a pyrotechnic component in the vehicle without enabling the pyrotechnic component. Further, the controller is designed, if the trigger status exhibits the triggered state, to reset the trigger status from the triggered state to the non-triggered state when the pyrotechnic component is enabled.

An apparatus for controlling a sensor of an object's safety system is provided. The apparatus includes an input node configured to receive safety information about a likelihood that the sensor senses a safety-relevant event. Further, the apparatus includes a processing circuit configured to control the sensor to perform a sensor diagnosis procedure, if the safety information indicates that it is unlikely that the sensor senses the safety-relevant event within a future period of time.

A safety-critical controller of a vehicle monitors functioning of the controller, at least one sensor and/or at least one actuator to detect an error. When specific error conditions exist, a warning for the driver is generated. It is detected whether the error is remediated within a specified time span, and if not, then corresponding error data is transmitted to a vehicle manufacturer and/or a vehicle service provider. The time span may be extended if the driver confirms the warning by operating a corresponding operating device.

A sensor system for a vehicle, including a first sensor that detects at least one collision-relevant physical variable and outputs at least one corresponding first sensor signal, and at least one second sensor that, independently of the first sensor, detects at least one collision-relevant physical variable and outputs at least one corresponding second sensor signal, and an evaluation and control unit that receives the at least one first sensor signal and the at least one second sensor signal and evaluates them for the collision detection. A method is also described for monitoring a sensor. The evaluation and control unit uses at least one second comparison signal that is based on the at least one second sensor signal of the at least one second sensor to monitor the first sensor.

A method is presented for operating a safety-critical controller, wherein the controller monitors correct functioning of the controller, of at least one sensor or at least one actuator, or a plurality of these, and where specific error conditions exist a warning for the driver is generated, wherein for at least a subgroup of error conditions as a warning an appropriate warning message is given to the driver.

If within a specified time span no clearance of the error has been detected, a corresponding data transmission to a vehicle manufacturer and/or service provider takes place, wherein the time span is preferably extended if the driver confirms the warning message by operating a corresponding operating means.

A method for detecting a malfunction or defect of a sensor of a vehicle safety device uses a control unit of the vehicle safety device and at least one self-testing sensor which is separate from the control unit and transmits measuring values to the control unit. The following steps are performed: a) The sensor performs the self-test of the sensor, wherein the measuring section of the sensor is activated in a simulated manner in order to generate a test measuring value in response to the simulated activation, b) a signal is transmitted to the control unit which includes at least one of: a ratio of test measuring value to intensity of the simulated activation, a deviation of the test measuring value from the simulated activation and a test measuring value, c) it is checked by means of the control unit whether at least one of the ratio, the deviation and the measuring value is plausible, d) the control unit determines that the sensor has malfunctioned or is defective if at least one on the ratio, the deviation and the test measuring value is considered to be non-plausible.

An apparatus for controlling a sensor of an object's safety system is provided. The apparatus includes an input node configured to receive safety information about a likelihood that the sensor senses a safety-relevant event. Further, the apparatus includes a processing circuit configured to control the sensor to perform a sensor diagnosis procedure, if the safety information indicates that it is unlikely that the sensor senses the safety-relevant event within a future period of time.

A method for checking a sensor signal suitable for actuating a passenger protection arrangement of a vehicle. The method includes a step of carrying out a comparison between the sensor signal and at least one reference signal, repeatedly within a predetermined time interval, in order to obtain a plurality of comparison results, and a step of evaluating the sensor signal based on the plurality of comparison results, in order to detect a fault in the sensor signal.