WATCHDOG FOR MONITORING A PROCESSOR

Abstract

The disclosure relates to a watchdog for monitoring a processor. The watchdog sends messages to the processor which subsequently sends back its own status information and optionally the status information of system components and the test results thereof at predetermined times as answers to the watchdog. The watchdog comprises at least one result memory in the form of, e.g., a shift register in which the watchdog records the history of the answers and examines patterns in erroneous answers. The recording is generated by a trigger event which can be the reception of individual answers and/or the end of scheduled reception time periods. According to the patterns, signalizations are carried out on the processor and/or other system components, which optionally introduce measures and adapt their structure and/or the implemented programs and/or the priority of said implementations.

Claims

1.-42. (canceled)

43. A method for monitoring a processor by a watchdog comprising a clock generator, a result memory having n result memory cells, wherein n is a positive integral number larger than 1, a first stimulating portion of the watchdog (QSTM) for transmission of messages from the watchdog to the processor, a first evaluation portion of the watchdog (AVAL) for evaluation of answers of the processor which are transmitted by the processor to the watchdog in response to the messages from the watchdog, and further comprising a second evaluation portion of the watchdog (VAL) for evaluation of buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, wherein, in the method n information items (Inf.sub.1 to Inf.sub.n) are buffered into the n result memory cells of the result memory, wherein the n buffered information items (Inf.sub.1 to Inf.sub.n) are continuously numbered from 1 to n, wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) is assigned to a respective result memory position of n result memory positions which are continuously numbered from 1 to n, and wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) comprises at least one first information portion, the watchdog is operative to transmit messages to the processor that can pertain to the processor and to further system components, the processor is operative to transmit answers to the watchdog depending on the messages, the first evaluation portion of the watchdog (AVAL) is operative to assess each of the answers of the processor as correct or not correct, wherein a respective answer is correct if a content of the respective answer coincides with at least one possible expected content, and if the respective answer is received by the watchdog within a predetermined reception time period, and wherein the respective answer is not correct if the content of the respective answer does not coincide with at least one possible expected content, or if the respective answer is not received by the watchdog within the predetermined reception time period, and in the result memory, upon reception of each of the answers of the processor, a j-th buffered information item of the n buffered information items at a j-th result memory position in a corresponding result memory cell of the result memory is deleted from the result memory, wherein 1jn, the remaining [n1] buffered information items (Inf.sub.k), wherein 1jn and kj, are respectively shifted from the respective k-th result memory position (p.sub.k, with 1jm and kj) to another result memory position (p.sub.k, with kj and 1km), and at least as a new first portion of the j-th buffered information item (e.g. Inf.sub.j) at a result memory position into which none of the remaining [n1] buffered information items (Inf.sub.1 to Inf.sub.n) has been shifted, there is used at least a result of the evaluation of the respective answer of the processor in correspondence to a value for correct or for not correct, wherein the second evaluation portion of the watchdog (VAL), if buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.n) in the result memory cells of the result memory comprise an identifiable predetermined pattern, generates at least one control signal adapted to change a state of the processor, or generates a signal from which the control signal is derived.

44. The method according to claim 43, wherein the processor includes to-be-monitored systems components.

45. The method according to claim 43, wherein to a first expected answer, there is assigned, by the first evaluation portion of the watchdog (AVAL), a predetermined first reception time period as the predetermined reception time period for the first answer, and to a second expected answer, there is assigned, by the first evaluation portion of the watchdog (AVAL), a predetermined second reception time period as the predetermined reception time period for the second answer, wherein the predetermined first reception time period and the predetermined second reception time period are different and overlap each other or do not overlap each other, wherein the predetermined first reception time period has no effect for the evaluation of the second answer, and wherein the predetermined second reception time period has no effect for the evaluation of the first answer.

46. The method according to claim 43, wherein: the watchdog is operative, by the first evaluation portion of the watchdog (AVAL), to assess the answer of the processor as correct or not correct, wherein the answer is correct if it additionally applies that, within the predetermined reception time period, a number of answers received by the watchdog does not exceed, due to the respective received answer, a predetermined maximal number of to-be-received answers or, at an end of the predetermined reception time period, does not fall short of a predetermined minimal number of the to-be-received answers, and wherein an answer is not correct if it alternatively applies that, within the respective predetermined reception time period, the number of the answers received by the watchdog exceeds the predetermined maximal number of the to-be-received answers or is less than the predetermined minimal number of the to-be-received answers.

47. The method according to claim 43, wherein the evaluation of the answer of the processor by the first evaluation portion of the watchdog is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory.

48. The method according to claim 43, wherein the evaluation of the answer of the processor by the first evaluation portion of the watchdog is additionally depending on the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory.

49. The method according to claim 43, wherein the processor comprises the second evaluation portion of the watchdog (VAL), wherein the second evaluation portion of the watchdog (VAL) is operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, to additionally generate at least one further evaluation, and wherein at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory additionally comprises a to-be-buffered further evaluation of the second evaluation portion of the watchdog as a further information portion in addition to the first information portion.

50. The method according to claim 43, wherein the watchdog is additionally provided with the second evaluation portion of the watchdog (VAL) for evaluation of at least two of the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, at least one further result memory having m result memory cells for storage of m further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein m is a positive integral number larger than 1, and a further evaluation portion of the watchdog (VAL.sub.B) for evaluation of the m further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) is assigned to a respective result memory position of m result memory positions of the further result memory which are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least one respective information portion, wherein, in the further result memory, upon each reception of an answer of the processor, the j-th further buffered information item (Inf.sub.jB) at the j-th result memory position in a corresponding result memory cell of the further result memory is deleted from the further result memory, wherein 1jm, each of remaining [m1] buffered information items (Inf.sub.kB), wherein 1jm and kj, is respectively shifted from a respective k-th result memory position (p.sub.k, with 1jm and kj) of the further result memory to a respective other result memory position (p.sub.k, with kk and 1km) of the further result memory, and at least as a new first portion of the j-th buffered information item (Inf.sub.jB) at a result memory position of the further result memory into which none of the remaining [m1] buffered further information items has been shifted, there is used at least a result of the further evaluation of the second evaluation portion of the watchdog (VAL), and wherein the further evaluation portion of the watchdog (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory, generates the at least one control signal adapted to change the state of the processor, or generates the signal from which the control signal is derived.

51. The method according to claim 50, wherein the second evaluation portion of the watchdog (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and kj) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, to generate at least one further evaluation.

52. The method according to claim 50, wherein, at an end of the predetermined reception time period, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to not correct.

53. The method according to claim 50, wherein, at an end of the predetermined reception time period, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to correct.

54. The method according to claim 43, wherein the watchdog is additionally provided with the second evaluation portion of the watchdog (VAL) for evaluation of the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, at least one further result memory having m result memory cells for storage of m further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein m is a positive integral number larger than 1, and a further evaluation portion of the watchdog (VAL.sub.B) for evaluation of the further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) is assigned to a result memory position of m result memory positions of the further result memory which are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a respective first information portion, wherein, in the further result memory, upon each reception of an answer of the processor, the j-th further buffered information item (Inf.sub.jB) at the j-th result memory position in a result memory cell of the further result memory is deleted from the further result memory, wherein 1jm, each of the remaining [m1] buffered information items (Inf.sub.kB), wherein 1jm and kj, is shifted from the respective k-th result memory position (p.sub.k, with 1jm and kj) of the further result memory to another result memory position (p.sub.k, with kk and 1km) of the further result memory, and at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the result memory position of the further result memory into which none of the remaining [m1] buffered further information items has been shifted, there is used at least a result of the further evaluation of the second evaluation portion of the watchdog (VAL), and wherein the further evaluation portion of the watchdog (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory, generates the control signal adapted to change the state of the processor, or generates the signal from which the control signal is derived.

55. The method according to claim 43, wherein the watchdog is additionally provided with the second evaluation portion of the watchdog (VAL) for evaluation of the n buffered information items (Infi to Inf.) of the result memory, at least one further result memory having m result memory cells for storage of m further to-be-buffered information items (Inf.sub.1B to Inf.sub.mB), wherein m is a positive integral number larger than 1, and a further evaluation portion of the watchdog (VAL.sub.B) for evaluation of the further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) is assigned to a respective result memory position of m result memory positions of the further result memory which are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a respective first information portion, wherein, in the further result memory, after an end of a predetermined number q of successive reception time periods, the j-th further buffered information item (Inf.sub.jB) at the j-th result memory position in a respective result memory cell of the further result memory is deleted from the further result memory, wherein 1jm, each of the [m1] buffered information items (Inf.sub.kB), wherein 1jm and kj, is shifted from a respective k-th result memory position (p.sub.k, with 1jm and kj) of the further result memory to a respective other result memory position (p.sub.k, with kk and 1km) of the further result memory, and at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the result memory position of the further result memory into which none of the remaining [m1] buffered further information items has been shifted, there is used, depending on an answer or answers received after the end of the predetermined number q of successive reception time periods, at least a result of the further evaluation of the second evaluation portion of the watchdog (VAL), and wherein the further evaluation portion of the watchdog (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory, generate the control signal adapted to change the state of the processor.

56. The method according to claim 55, wherein, after the end of the predetermined number q of successive reception time periods, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to not correct.

57. The method according to claim 55, wherein, after the end of the predetermined number q of successive reception time periods, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to correct.

58. The method according to claim 43, wherein the watchdog comprises, as the result memory or, if provided, as a further result memory, a shift register and respectively a further shift register.

59. A method for monitoring a processor by a watchdog comprising a clock generator, a result memory having n result memory cells, wherein n is a positive integral number larger than 1, a first stimulating portion of the watchdog (QSTM) for transmission of messages from the watchdog to the processor, a first evaluation portion of the watchdog (AVAL) for evaluation of answers of the processor which are transmitted by the processor to the watchdog in response to the messages from the watchdog, and comprising a second evaluation portion of the watchdog (VAL) for evaluation of buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, wherein, in the method n information items (Inf.sub.1 to Inf.sub.n) are buffered into the n result memory cells of the result memory, wherein the n buffered information items (Inf.sub.1 to Inf.sub.n) are continuously numbered from 1 to n, wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) is assigned to a respective result memory position of n result memory positions which are continuously numbered from 1 to n, and wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) comprises at least one first information portion, the watchdog is operative to transmit messages to the processor that can pertain to the processor itself and to further system components, the processor is operative to transmit answers to the watchdog depending on the messages, the first evaluation portion of the watchdog is operative to assess each of the answers of the processor as correct or not correct, wherein a respective answer is correct if a content of the respective answer coincides with at least one possible expected content, and if the answer is received by the watchdog within a predetermined reception time period, and wherein the respective answer is not correct if the content of the respective answer does not coincide with at least one possible expected content, or if the respective answer is not received by the watchdog within the predetermined reception time period, and in the result memory, after an end of the predetermined reception time period or after a respective end of each predetermined reception time period or after an end of a plurality of predetermined reception time periods, a buffered information item (e.g. Inf.sub.j) at a j-th result memory position in a corresponding result memory cell of the result memory is deleted from the result memory, wherein 1jn, the remaining [n1] buffered information items (Inf.sub.k), wherein 1jn and kj, are shifted from the respective k-th result memory position (p.sub.k, with 1jm and kj) to another result memory position (p.sub.k, with kk and 1kn), and at least as a new first portion of the j-th buffered information item (e.g. Inf.sub.j) at a result memory position into which none of the remaining [n1] buffered information items (Inf.sub.1 to Inf.sub.n) has been shifted, there is used, in correspondence to a value for correct or for not correct, at least a result of the evaluation of the respective answer or the respective answers of the processor received before the end of the reception time period or periods, wherein the second evaluation portion of the watchdog (VAL), if buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.n) in the result memory cells of the result memory comprise an identifiable predetermined pattern, generates at least one control signal adapted to change a state of the processor, or generates a signal from which the control signal is derived.

60. The method according to claim 59, wherein the processor includes to-be-monitored systems components.

61. The method according to claim 59, wherein to a first expected answer, there is assigned, by the first evaluation portion of the watchdog (AVAL), a predetermined first reception time period as the predetermined reception time period for the first answer, and to a second expected answer, there is assigned, by the first evaluation portion of the watchdog (AVAL), a predetermined second reception time period as the predetermined time period for the second answer, wherein the predetermined first reception time period and the predetermined second reception time period are different and overlap each other or do not overlap each other, wherein the predetermined first reception time period has no effect for the evaluation of the second answer, and wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer.

62. The method according to claim 59, wherein the first evaluation portion of the watchdog (AVAL) is operative to assess the answer of the processor as correct or not correct, wherein an answer is correct if it additionally applies that, within the predetermined reception time period, a number of answers received by the watchdog does not exceed, due to the respective received answer, a predetermined maximal number of to-be-received answers or, at the end of the predetermined reception time period, does not fall short of a predetermined minimal number of the to-be-received answers, and wherein an answer is not correct if it alternatively applies that, within the respective predetermined reception time period, the number of the answers received by the watchdog exceeds the predetermined maximal number of to-be-received answers or falls short of the predetermined minimal number of to-be-received answers.

63. The method according to claim 59, wherein the evaluation of the answer of the processor by the first evaluation portion of the watchdog (AVAL) of the watchdog is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory.

64. The method according to claim 59, wherein the evaluation of the answer of the processor by the first evaluation portion of the watchdog (AVAL) is additionally depending on the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory.

65. The method according to claim 59, wherein the processor comprises the second evaluation portion of the watchdog (VAL), wherein the second evaluation portion of the watchdog (VAL) is operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, to additionally generate at least one further evaluation, and wherein at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory comprises a to-be-buffered further evaluation of the second evaluation portion of the watchdog (VAL) as a further information portion in addition to the first information portion.

66. The method according to claim 59, wherein the watchdog is additionally provided with the second evaluation portion of the watchdog (VAL) for evaluation of at least two of the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, at least one further result memory having m result memory cells for storage of m further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein m is a positive integral number larger than 1, and a further evaluation portion of the watchdog (VAL.sub.B) for evaluation of the further m buffered information items (Inf.sub.1B to Inf.sub.mB), wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) is assigned to a respective result memory position of m result memory positions of the further result memory which are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least one respective information portion, wherein, in the further result memory, upon each reception of an answer of the processor, the j-th further buffered information item (Inf.sub.jB) at the j-th result memory position in a corresponding result memory cell of the further result memory is deleted from the further result memory, wherein 1jm, each of remaining [m1] buffered information items (Inf.sub.kB), wherein 1jm and kj, is shifted from a respective k-th result memory position (p.sub.k, with 1jm and kj) of the further result memory to a respective other result memory position (p.sub.k, with kk and 1km) of the further result memory, and at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at a result memory position of the further result memory into which none of the remaining [m1] buffered further information items has been shifted, there is used at least a result of the further evaluation of the second evaluation portion of the watchdog (VAL), and wherein the further evaluation portion of the watchdog (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory, generates the at least one control signal adapted to change the state of the processor, or generates the signal from which such a control signal is derived.

67. The method according to claim 59, wherein the second evaluation portion of the watchdog (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and kk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, to generate at least one further evaluation.

68. The method according to claim 59, wherein, at an end of the predetermined reception time period, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to not correct.

69. The method according to claim 59 to, wherein, at an end of the predetermined reception time period, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to correct.

70. The method according to claim 59, wherein the watchdog is additionally provided with the second evaluation portion of the watchdog (VAL) for evaluation of the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, at least one further result memory having m result memory cells for storage of m further to-be-buffered information items (Inf.sub.1B to Inf.sub.mB), wherein m is a positive integral number larger than 1, and a further evaluation portion of the watchdog (VAL.sub.B) for evaluation of the further buffered information items (Inf.sub.1B to Inf.sub.mB), wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) is assigned to a result memory position of m result memory positions of the further result memory which are continuously numbered from 1 to m, wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a respective information portion, wherein, in the further result memory, after the end of the predetermined reception time period or after the respective end of each reception time period or after an end of a predetermined number q of successive reception time periods, the j-th further buffered information item (Inf.sub.jB) at the j-th result memory position in a result memory cell of the further result memory is deleted from the further result memory, wherein 1jm, each of the remaining [m=1] buffered information items (Inf.sub.kB), wherein 1jm and kj, is shifted from a respective k-th result memory position (p.sub.k, with 1jm and kj) of the further result memory to a respective other result memory position (p.sub.k, with kk and 1km) of the further result memory, and at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the result memory position of the further result memory into which none of the remaining [m1] buffered further information items has been shifted, there is used at least a result of the further evaluation of the second evaluation portion of the watchdog (VAL) depending on an answer or the answers received up to an end of the predetermined reception time periods, and wherein the further evaluation portion of the watchdog (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory, generates the control signal adapted to change the state of the processor.

71. The method according to claim 70, wherein, after the end of the number q of successive reception time periods, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to not correct.

72. The method according to claim 70, wherein, after the end of the number q of successive reception time periods, the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory are set to a value corresponding to correct.

73. The method according to claim 70, wherein the watchdog comprises, as the result memory or, if provided, as a further result memory, a shift register and respectively a further shift register.

74. A method for monitoring a processor by a watchdog comprising a clock generator, a result memory having n result memory cells, wherein n is a positive integral number larger than 1, a first stimulating portion of the watchdog (QSTM) for transmission of messages from the watchdog to the processor, a first evaluation portion of the watchdog (AVAL) for evaluation of answers of the processor which are transmitted by the processor to the watchdog in response to the messages from the watchdog, and comprising a second evaluation portion of the watchdog (VAL) for evaluation of buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, comprising: presetting, by the clock generator, a predetermined reception time period for an answer (ANS) of the processor to the watchdog; transmitting, from the watchdog to the processor, one or a plurality of messages (MSG) with respective contents which can pertain to the processor and/or to further system components, responding to the message in form of the answer to the watchdog, performed by the processor depending on at least a content of one of the messages, evaluating the answer of the processor to the watchdog as correct or not correct, performed by the watchdog, for generating an evaluation result, wherein the answer is correct if a content of the answer coincides with at least one possible expected content, and if the answer is received by the watchdog within the predetermined reception time period (b), and wherein an answer is not correct if the content of the answer does not coincide with at least one possible expected content, or if the answer is not received by the watchdog within the predetermined reception time period, changing a content of a result memory with n buffered information items (Inf.sub.1 to Inf.sub.n), wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) comprises at least one respective first information portion and is assigned to a respective result memory position, wherein n is an integer larger than 1, wherein the changing is performed temporally after reception of the respective answer by the watchdog or temporally after an end of the predetermined reception time period by deletion of at least one buffered information item (Inf.sub.k) of the n information items (Inf.sub.1 to Inf.sub.n), and changing at least one logical result memory position of the at least one buffered information item (Inf.sub.j) of the n buffered information items (Inf.sub.1 to Inf.sub.n) in a result memory and use of a result of the evaluation of the at least one received answer as a new first information portion of a new buffered information item (Inf.sub.j) in the result memory, evaluation of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) by the second evaluation portion of the watchdog (VAL) by generating an evaluation result depending on identifiable predetermined patterns from the buffered information items (Inf.sub.1 to Inf.sub.n) of the n buffered information items (Inf.sub.1 to Inf.sub.n), and upon identification of a predetermined pattern, generation of at least one control signal adapted to change a state of the processor, or generation of a signal from which the control signal is derived.

75. The method according to claim 74, comprising: fixing a first predetermined reception time period depending on a first expected answer for use as the predetermined reception time period in the evaluation of a first answer of the processor performed by the watchdog, and fixing a second predetermined reception time period depending on a second expected answer for use as the predetermined reception time period in the evaluation of the second answer of the processor performed by the watchdog, wherein the predetermined first reception time period and the predetermined second reception time period overlap each other or do not overlap each other, and wherein the first predetermined reception time period has no effect for the evaluation of the second answer, and the second predetermined reception time period has no effect for the evaluation of the first answer.

76. The method according to claim 74, further comprising: evaluation of the answer of the processor as correct or not correct, wherein the answer is correct only if it additionally applies that, within the respective predetermined reception time period, also a number of answers received by the watchdog does not exceed, due to the respective received answer, a predetermined maximal number of to-be-received answers or additionally also at an end of the predetermined reception time period, the number of answers does not fall short of a predetermined minimal number of to-be-received answers, and wherein an answer is not correct if it alternatively applies that, within the respective predetermined reception time period, the number of the answers received by the watchdog exceeds, due to the respective received answer, the predetermined maximal number of to-be-received answers or, the number of the answers, at the end of the predetermined reception time period, falls short of the predetermined minimal number of to-be-received answers.

77. The method according to claim 74, further comprising: evaluation of the answer of the processor in additional dependence on at least one information portion of a buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory in addition to the dependence of this evaluation of the answer of the processor to the watchdog.

78. The method according to claim 74, further comprising: evaluation of the answer of the processor in additional dependence on the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory in addition to the dependence of the evaluation of the answer of the processor to the watchdog.

79. The method according to claim 74, further comprising: additional generation of at least one further evaluation by the second evaluation portion of the watchdog (VAL) depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory, and storing the further evaluation as a further information portion of a buffered information item (Inf.sub.3) of the buffered information items (Infi to Inf.) of the result memory.

80. The method according to claim 74, further comprising: generating a second further evaluation depending on an occurrence of predetermined patterns among at least respectively a portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and kj) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory.

81. The method according to claim 74, further comprising: at an end of the predetermined reception time period, setting all of the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory to a value corresponding to not correct or to a value corresponding to correct.

82. The method according to claim 74, further comprising: evaluation of the buffered information items (Inf.sub.1 to Inf.sub.n) of the results memory for setting a further evaluation result, and changing a content of a second result memory with m further buffered information items (Inf.sub.1B to Inf.sub.mB) with a first information portion and optionally further information portions, wherein m is an integer larger than 1, and with respectively one result memory position, temporally after reception of a respective answer by the watchdog or temporally after an end of the predetermined reception time period by deletion of at least one further buffered information item (Inf.sub.k) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) in the further result memory, and changing at least one logical result memory position of at least one buffered information item (Inf.sub.jB) of m further buffered information items (Inf.sub.1B to Inf.sub.mB) in the further result memory and use of the further evaluation result as a new first information portion of a new further buffered information item (Inf.sup.1) in the further result memory, further evaluation of at least two of the m further buffered information items (Inf.sub.1B to Inf.sub.mB), and generation of the at least one control signal and/or at least one further control signal adapted to change the state of the processor, depending on the result of the further evaluation.

Description

LIST OF THE DRAWINGS

[0035] The disclosure will be described hereinafter on the basis of examples and the drawings. The drawings specifically show:

[0036] FIG. 1 a rough, simplified schema of the cooperation of individual components provided in accordance with the disclosure,

[0037] FIG. 2 the schema according to FIG. 1 with a shift register (SR) as result memory (ES),

[0038] FIG. 3 a two-stage evaluation process,

[0039] FIG. 4 a two-stage evaluation process according to FIG. 3, wherein the first result memory (ES) is a shift register (SR) and the further result memory (ESB) is a further shift register (SRB),

[0040] FIGS. 5 to 7 schematically an exemplary, successive temporal behaviour of an exemplary one-step solution with a shift register (SR) corresponding to FIG. 2,

[0041] FIG. 8 an exemplary two-step method corresponding to FIG. 4 and

[0042] FIG. 9 a two-step method according to FIG. 2, wherein the pattern of the information stored in the shift register (SR) is evaluated.

DESCRIPTION OF THE DRAWINGS

[0043] FIG. 1 shows a basic simplified schema of the cooperation of the individual components of the device according to the disclosure. The watchdog (WDG) comprises a stimulating means (QSTM), first evaluation means (AVAL), an internal clock generator (CTR), a first result memory (ES), and second evaluation means (VAL). The processor (PC) here comprises the further system components (SC). The first stimulating means (QSTM) send messages (MSG) from the watchdog (WDG) to the processor (PC), which then answers these with answers (ANS) at correct times and with expected contents and in the correct number, which can be checked by the watchdog (WDG). This check is performed by the first evaluation means (AVAL). The first evaluation means (AVAL) evaluate the answers (ANS) of the processor (PC) to the watchdog (WDG) prompted by said messages (MSG) which the first stimulating means (QSTM) sent from the watchdog (WDG) to the processor (PC) and which the processor should have answered with the aforesaid answers (ANS) at correct times and with expected contents and in the correct number, which can then be checked in turn by the first evaluation means (AVAL) of the watchdog (WDG). These evaluation results of the first evaluation means (AVAL) are buffered in the result memory (ES), which contains the history of these evaluations. The result memory (ES) consists of result memory cells. Each result memory cell of the result memory (ES) is continuously numbered by a number from 1 to n. This means that each result memory cell on the one hand has a real physical result memory cell position and on the other hand has a logical result memory cell position which must not be identical to the real physical result memory cell position. The result memory can be embodied as a shift register (SR). The result memory (ES) deletes preferably at least one buffered information item (e.g. Inf.sub.n) from the result memory (ES) temporally after each reception of an answer (ANS) of the processor (PC) by the watchdog (WDG) or after the reception of individual answers (ANS) or temporally at the end of the scheduled reception time period (b). At the same time or in conjunction therewith, the result memory (ES) shifts the remaining (n1) not-deleted, buffered information items from the originally assigned logical result memory positions to other logical result memory positions. This can be implemented on the one hand by real displacement of the information data into other physical result memory cells, or much more simply by reallocation of the logical result memory positions to the physical result memory positions and therefore to the result memory cells. In the simplest case just one write pointer is used, which defines which of the result memory cells is to be deleted next and the repositioned in accordance with a predeterminable schema. One of the result memory cells then contains only the deletion value. The new information item (Inf.sub.1) to be buffered is then written into this result memory cell. This write process at the same time can represent the deletion process of the previous information item of this result memory cell. At least the first information portion of the information item is defined in the relevant result memory cell. At least the result of the evaluation of the received answer (ANS) by the first evaluation means (AVAL) is used at least as new first portion of the new buffered information item (e.g. Inf.sub.1) at the relevant logical result memory position into which none of the remaining (n1) buffered information items has been shifted. Depending on whether this result was evaluated by the first evaluation means (AVAL) in correspondence with a logical value correct or not correct, the associated result memory cell then contains the associated logical value. These information items (Inf.sub.1 to Inf.sub.n) thus buffered are evaluated in the example of FIG. 1 by second evaluation means (VAL). It evaluates the information items (Inf.sub.1 to Inf.sub.n) buffered in the result memory (ES) or in the shift register (SR). Here, the second evaluation means (VAL) may also generate more than just one evaluation as appropriate. The second evaluation means (VAL) for example can define the number of correct information items in result memory cells of the result memory (ES) and can compare these with a threshold value. If the determined number lies below the threshold value, the control signal (RES) or another corresponding signal for example can be set by second evaluation means (VAL) for influencing the processor (PC) or parts thereof or other system components (SC). Further signals in the form of further evaluations can also be generated by the second evaluation means (VAL), which for example correspond to specific patterns in the result memory cells of the result memory (ES). The clock generator (CTR) generates the time signals for all relevant blocks (QSTM, AVAL, SR, VAL) of the watchdog (WDG). In particular, the clock generator (CTR) preferably defines the time of sending of the messages (MSG) to the processor (PC) by the watchdog (WDG) and the time position and duration of the scheduled reception time periods (b) for the answers (ANS) of the processor (PC) to these messages (MSG). The clock generator (CTR) thus arranges, preferably in cooperation with the first evaluation means (AVAL), which receive the messages (MSG) of the processor (PC), for the result memory (ES) to change the result memory positions of the buffered information items to the correct times as predetermined and to delete the correct result memory cell and to write the new evaluation result of the first evaluation means (AVAL) into the correct result memory position at the correct time.

[0044] FIG. 2 corresponds to FIG. 1 with a shift register (SR) as result memory (ES).

[0045] FIG. 3 shows a two-stage device according to the disclosure. It again shows a basic simplified schema of the cooperation of the individual components of the device according to the disclosure. The watchdog (WDG) again comprises first stimulating means (QSTM), first evaluation means (AVAL), an internal clock generator (CTR), a first result memory (ES), second evaluation means (VAL), a further result memory (ES.sub.B) and further second evaluation means (VAL.sub.B). The processor (PC) here comprises, again, the further system components (SC). The first stimulating means (QSTM) send messages (MSG) from the watchdog (WDG) to the processor (PC), which then answers these with answers (ANS) at correct times and with expected contents and in the correct number, which can be checked by the watchdog (WDG). This check is performed, again, by the first evaluation means (AVAL). The first evaluation means (AVAL) evaluate the answers (ANS) of the processor (PC) to the watchdog (WDG) prompted by said messages (MSG) which the first stimulating means (QSTM) sent from the watchdog (WDG) to the processor (PC) and which the processor should have answered with the aforesaid answers (ANS) at correct times and with expected contents and in the correct number to answers (ANS), which can then be checked in turn by the first evaluation means (AVAL) of the watchdog (WDG). These evaluation results of the first evaluation means (AVAL) are buffered in the first result memory (ES), which contains the history of these evaluations. The result memory (ES) consists, again, of result memory cells. Each result memory cell of the result memory (ES) is continuously numbered by a number from 1 to n. This means that each result memory cell on the one hand has a real physical result memory cell position and on the other hand has a logical result memory cell position which must not be identical to the real physical result memory cell position. The first result memory (ES) can be embodied as a shift register (SR). The first result memory (ES) deletes preferably at least one buffered information item (e.g. Inf.sub.n) from the result memory (ES) temporally after each reception of an answer (ANS) of the processor (PC) by the watchdog (WDG) or after the reception of an answer (ANS) or temporally at the end of the scheduled reception time period (b). At the same time or in conjunction therewith, the first result memory (ES) shifts the remaining (n1) not-deleted, buffered information items from the originally assigned logical result memory positions to other logical result memory positions of the first result memory (ES). This can be implemented on the one hand by real displacement of the information data into other physical result memory cells of the first result memory (ES), or much more simply by reallocation of the logical result memory positions to the result memory cells of the first result memory (ES). In the simplest case just one first write pointer is used for the first result memory (ES), which defines which of the result memory cells of the first result memory (ES) is to be deleted next. One of the result memory cells of the first result memory (ES) then contains only the deletion value. The new information item (Inf.sub.1) to be buffered is then written into this result memory cell of the first result memory (ES). This write process at the same time can represent the deletion process of the previous information item of this result memory cell of the first result memory (ES). At least the first information portion of the information item is defined in the relevant result memory cell of the first result memory (ES). At least the result of the evaluation of the received answer (ANS) by the first evaluation means (AVAL) is used at least as new first portion of the new buffered information item (e.g. Inf.sub.1) at the relevant logical result memory position of the first result memory (ES) into which none of the remaining (n1) buffered information items has been shifted. Depending on whether this result was evaluated in correspondence with a logical value correct or not correct, the associated result memory cell of the first result memory (ES) then contains the associated logical value. The information items (Inf.sub.1 to Inf.sub.n) thus buffered are evaluate in the example of FIG. 3 by second evaluation means (VAL). They evaluate the information items (Inf.sub.1 to Inf.sub.n) buffered in the first result memory (ES) or in the first shift register (SR) that reflect the last evaluation results. Here, the second evaluation means (VAL) may also generate more than just one further evaluation as appropriate. This second evaluation means (VAL) for example within the scope of the evaluation of the content of the first result memory (ES) or the first shift register (SR) can define for example the number of correct information items in the result memory cells of the result memory (ES) and can compare these with a first threshold value. If this number thus determined lies below the first threshold value, the result is for example assessed as correct in correspondence with a logical value and in the other case is assessed as not correct in correspondence with a logical value.

[0046] These evaluation results of the second evaluation means (VAL) are now likewise buffered in a further result memory (ES.sub.B) in contrast to FIG. 1. This stores the history of these evaluations. The further result memory (ES.sub.B) consists of result memory cells, similarly to the first result memory (ES). Each further result memory cell of the further result memory (ES.sub.B) is continuously numbered by a number from 1 to m. This means that each further result memory cell on the one hand has a real physical further result memory cell position and on the other hand has a logical further result memory cell position which must not be identical to the real physical further result memory cell position. The further result memory (ES.sub.B) can be embodied as a further shift register (SR.sub.B). The further result memory (ES.sub.B) deletes at least one further buffered information item (e.g. Inf.sub.mB) from the further result memory (ES.sub.B) temporally after each reception of an answer (ANS) of the processor (PC) by the watchdog (WDG) or temporally at the end of the scheduled reception time period (b). At the same time or in conjunction therewith, the further result memory (ES.sub.B) shifts the remaining (m1) non-deleted buffered further information items from the original associated logical further result memory positions to other logical further result memory positions of the further result memory (ES.sub.B). This can be implemented on the one hand by real displacement of the further information data into other physical further result memory cells of the further result memory (ES.sub.B), or much more simply by reallocation of the logical further result memory positions to the further physical result memory cells of the further result memory (ES.sub.B). In the simplest case just one further write pointer is used for the further result memory (ES.sub.B), which defines which of the further result memory cells of the further result memory (ES.sub.B) is to be deleted next or overwritten. One of the further result memory cells of the further result memory (ES.sub.B) then contains only the deleted value. The new further information item (Inf.sub.1B) to be buffered is then written into this further result memory cell of the further result memory (ES.sub.B). This writing process can at the same time represent the deletion process of the previous further information item of this further result memory cell of the further result memory (ES.sub.B). The first information portion of the further information item is at least defined in the relevant further result memory cell of the further result memory (ES.sub.B). At least the further result of the further evaluation of the content of the first result memory (ES) by the second evaluation means (VAL) is used at least as new first portion of the new buffered further information item (e.g. Inf.sub.1B) at the relevant further result memory position of the further result memory (ES.sub.B) into which none of the remaining (n1) buffered further information items has been shifted. Depending on whether this further result was evaluated in correspondence with a logical value correct or not correct, the associated further result memory cell of the further result memory (ES.sub.B) then contains the associated logical value. The m further information items (Inf.sub.1B to Inf.sub.mB) thus buffered are now evaluated in the example of FIG. 3 by further second evaluation means (VAL.sub.B). They evaluate the m information items (Inf.sub.1B to Inf.sub.mB) buffered in the further result memory (ES.sub.B) or in the further shift register (SR.sub.B) that reflect the last evaluation results of the second evaluation means (VAL). Here, the further second evaluation means (VAL.sub.B) may also generate more than just one further evaluation as appropriate. In the example of FIG. 3 these are the first warning signal (WRN) and the second warning signal (WRN2). These further second evaluation means (VAL.sub.B) for example within the scope of the evaluation of the content of the further result memory (ES.sub.B) or the further shift register (SR.sub.B) can define for example the number of correct information items in the further result memory cells of the further result memory (ES.sub.B) and can compare these with a first further threshold value, for example similarly to FIG. 1. If the number thus determined lies below the first further threshold value, the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set, for example. If the number thus determined lies below a second further threshold value, the first warning signal (WRN) for example can be set, whereupon the processor (PC) or parts thereof or other system components (SC) can introduce measures for reducing the processor or system load. If this number thus determined lies below a third further threshold value, the second warning signal (WRN2) for example can be set, whereupon the processor (PC) or parts thereof or other system components (SC) can introduce further-reaching measures for further reducing the processor or system load. If none of these measures were sufficient, for example the first control signal (RES), which for example could result in a full system or processor restart, could lastly be set, for example.

[0047] As before, further signals however can be generated here as well by the further second evaluation means (VALB) in the form of further evaluations, which for example can correspond to specific patterns in the further result memory cells of the further result memory (ES.sub.B). In the example of FIG. 3 the clock generator (CTR) generates the time signals for all relevant blocks (QSTM, AVAL, ES, VAL, ES.sub.B, VAL.sub.B) of the watchdog. In particular, the clock generator (CTR) again preferably defines the time of sending of the messages (MSG) to the processor (PC) and the time position and duration of the scheduled reception time periods (b) for the answers (ANS) of the processor (PC) to these messages (MSG). The clock generator (CTR) thus arranges, preferably in cooperation with the first evaluation means (AVAL), which receive the messages (MSG) of the processor (PC), for the result memory (ES) to change the result memory positions of the n buffered information items (Inf.sub.1 to Inf.sub.n) to the correct times as predetermined and to delete the correct result memory cell and to write the new evaluation result of the first evaluation means (AVAL) into the correct result memory position of the first result memory (ES) at the correct time. The clock generator (CTR) in the example of FIG. 3 additionally arranges, preferably in cooperation with the second evaluation means (VAL), for the further result memory (ES.sub.B) to likewise change the further result memory positions of the m further buffered information items (Inf.sub.1B to Inf.sub.nB) to the correct times as predetermined and to delete the correct further result memory cell and to write the new evaluation result of the second evaluation means (VAL) into the correct further result memory position of the further result memory (ES.sub.B) at the correct time.

[0048] FIG. 4 corresponds to FIG. 3, wherein the first result memory (ES) is a shift register (SR) and the further result memory (ES.sub.B) is a further shift register (SR.sub.B),

[0049] FIGS. 5 to 7 show schematically an exemplary, successive temporal behaviour of an exemplary one-step solution with a shift register (SR) corresponding to FIG. 2. The clock generator (CTR) generates an exemplary window signal (WD). In the example of FIGS. 5 to 7 a 1-level is intended to mean that no answers are expected and that answers in these time periods with a 1-level are assessed as not correct, regardless of their content. In a time period with a 0-level of the window signal (WD), answers preferably in a predetermined number are expected. If the contents thereof are correct, i.e. corresponds to a content determinable in advance, they are assessed as correct. A deviating number of answers may also lead to a not correct evaluation as applicable. The example of FIGS. 5 to 7 show, by way of example, 27 temporal time periods (P1 to P27). Each of these exemplary 27 time periods (P1 to P27) is divided for example into a first time period (a) and a second time period (b). In the example of FIGS. 5 to 7 the exemplary window signal (WD) is at a logical 1-level in the first time period (a) and is at a logical 0-level in the second time period (b). In FIGS. 5 to 7 times of answers (ANS) are shown on a timeline from left to right beneath the window signal (WD). The time of each answer (ANS) is symbolized by an arrow upwards or downwards at a corresponding position on the timeline in temporal relation to the window signal (WD). An arrow downward corresponds to an answer (ANS) of the processor (PC) to the watchdog (WDG) of which the content is assessed by the first evaluation means (AVAL) as not correct. An arrow upward corresponds to an answer (ANS) of the processor (PC) to the watchdog (WDG) of which the content is assessed by the first evaluation means (AVAL) as correct. On the left-hand side of FIGS. 5 to 7 the values OK for correct and content and NOK for not correct content are marked. In the example of FIGS. 5 to 7 a shift register (SR) is used as first result memory (ES). In this example the shift register (SR) comprises 8 bits for example. In the first time period (P1) it contains the value 00111111. The b is intended to indicate that the values are bit values that may correspond to a logical 0 (=not correct) or a logical 1 (=correct).

[0050] In the first time period (P1) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The internal clock generator (CTR) of the watchdog (WDG) in this example, on account of the reception of the answer (ANS) with a constant delay, typically predetermined by the implementation, at the reception time period of the answer (ANS) of the processor (PC), generates a transfer of the evaluation result of the first evaluation means (AVAL) into the first shift register (SR) in conjunction with a shift operation to the left. The content of the shift register (SR) is then in this example 01111111, since a correct answer (ANS) was received at the correct time.

[0051] In the second first time period (P2) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11111111 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0052] In the third time period (P3) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11111111 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0053] In the fourth time period (P4) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (a) not scheduled therefor. The content of the shift register (SR) is then in this example 11111110 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the incorrect time.

[0054] In the fifth time period (P5) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (a) not scheduled therefor. The content of the shift register (SR) is then in this example 11111100 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the incorrect time.

[0055] In the sixth time period (P6) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11111001 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0056] In the seventh time period (P7) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11110010 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0057] In the eighth time period (P8) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (a) not scheduled therefor. The content of the shift register (SR) is then in this example 11100100 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the incorrect time.

[0058] In the ninth time period (P9) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11001000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0059] In the tenth time period (P10) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 10010001 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0060] In the eleventh time period (P11) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00100011 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0061] In the twelfth time period (P12) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 01000111 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0062] In the thirteenth time period (P13) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. Only one answer (ANS), however, of the processor was expected. Thus, in this example the answers (ANS) of the processor (PC) actually having a correct content are assessed as not correct. The content of the shift register (SR) is then in this example 10001110 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0063] In the fourteenth time period (P14) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00011100 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0064] In the fifteenth time period (P15) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00111001 after the transfer of the evaluation and implemented shift operation, since a correct answer (ANS) was received at the correct time.

[0065] In the sixteenth time period (P16) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 01110010 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0066] In the seventeenth time period (P17) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11100100 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0067] In the eighteenth time period (P18) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 11001000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0068] In the nineteenth time period (P19) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 10010000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0069] In the twentieth time period (P20) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00100000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0070] In the twenty-first time period (P21) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 01000000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0071] In the twenty-second time period (P22) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (a) not scheduled therefor. The content of the shift register (SR) is then in this example 10000000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the incorrect time.

[0072] In the twenty-third time period (P23) the watchdog (WDG) receives no answer (ANS) in the reception time period (b) scheduled therefor, although an answer (ANS) of the processor (PC) was expected in the reception time period (b) scheduled therefor. This is evaluated here by the first evaluation means for example as an answer (ANS) to be assessed as not correct. The content of the shift register (SR) is then in this example 00000000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0073] In the twenty-fourth time period (P24) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00000000 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0074] In the twenty-fifth time period (P25) the watchdog (WDG) receives an answer (ANS) assessed as correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00000001 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0075] In the twenty-sixth time period (P26) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00000010 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0076] In the twenty-seventh time period (P27) the watchdog (WDG) receives an answer (ANS) assessed as not correct by the first evaluation means (AVAL) in the reception time period (b) scheduled therefor. The content of the shift register (SR) is then in this example 00000100 after the transfer of the evaluation and implemented shift operation, since an incorrect answer (ANS) was received at the correct time.

[0077] The second evaluation means (VAL) evaluate in parallel the information items (Inf.sub.1 to Inf.sub.8) in the exemplary shift register (SR) of FIGS. 5 to 7. In this example the content of the shift register (SR) is evaluated by the second evaluation means after each shift operation of the shift register. This is implemented here by counting the 1-levels within the shift register (SR), which specify the answers (ANS) of the last eight time periods assessed as correct, in an exemplary count value (NO). Other counting methods and evaluations are of course conceivable explicitly. In this example the control signal (RES) is set if the shift register (SR) for example does not contain any information in which eight information items (Inf.sub.1 to Inf.sub.8) of the eight shift register cells that was assessed as correct information in the last eight time periods. Depending on the implementation it may be expedient if the control signal (RES) is not a non-return-to-zero signal (NRZ signal) as shown in FIGS. 5 to 7, but a return-to-zero signal (RTZ signal), which is active only for a short time period upon the occurrence of the condition, and then is active again only when the condition occurs again. In this example the first warning signal (WRN) is set if the shift register (SR) for example contains fewer than three information items (Inf.sub.1 to Inf.sub.8) for three correct information items in the last eight time periods. In this example the second warning signal (WRN2) is set if the shift register (SR) for example contains fewer than five information items (Inf.sub.1 to Inf.sub.8) for five correct information items in the last eight time periods.

[0078] FIG. 8 shows an exemplary two-step method corresponding to FIG. 4. The first result memory (ES) is realized here by a first shift register (SR) with an exemplary width of 4 bits. In each example the first shift register (SR) performs a shift operation to the left with each reception of an answer (ANS) and transfers the evaluation result of the first evaluation means (AVAL) into the shift register cell arranged furthest to the right (result memory cell). For improved clarity, the exemplary temporally different values of the 4 buffered information items (Inf.sub.1 to Inf.sub.4) of the shift register (SR) are written one below the other and offset.

[0079] At the start of the first time period (P1) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives four expected and no unexpected answers (ANS) of the processor (PC). All answers (ASN) are assessed as correct by the first evaluation means (AVAL). None of the answers (ASN) is assessed as not correct by the first evaluation means (AVAL). All expected answers are received in the reception time period (b) scheduled therefor. No answers are received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 1111 after adoption of the evaluation and 4 implemented shift operations.

[0080] At the start of the second time period (P2) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives four expected and no unexpected answers (ANS) of the processor (PC). Three answers (ASN) are assessed as correct by the first evaluation means (AVAL). One of the answers (ASN) is assessed as not correct by the first evaluation means (AVAL). Three of the expected answers are received in the reception time period (b) scheduled therefor. One answer is received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 0111 after adoption of the evaluation and 4 implemented shift operations.

[0081] At the start of the third time period (P3) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives four expected and no unexpected answers (ANS) of the processor (PC). Two answers (ASN) are assessed as correct by the first evaluation means (AVAL). Two of the answers (ASN) is assessed as not correct by the first evaluation means (AVAL). Three of the expected answers are received in the reception time period (b) scheduled therefor. One answer is received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 0101 after adoption of the evaluation and 4 implemented shift operations.

[0082] At the start of the fourth time period (P4) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives four expected and no unexpected answers (ANS) of the processor (PC). One answer (ASN) is assessed as correct by the first evaluation means (AVAL). Three of the answers (ASN) are assessed as not correct by the first evaluation means (AVAL). Three of the expected answers are received in the reception time period (b) scheduled therefor. One answer is received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 0001 after adoption of the evaluation and 4 implemented shift operations.

[0083] At the start of the fifth time period (P5) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives four expected and no unexpected answers (ANS) of the processor (PC). One answer (ASN) is assessed as correct by the first evaluation means (AVAL). Three of the answers (ASN) are assessed as not correct by the first evaluation means (AVAL). Three of the expected answers are received in the reception time period (b) scheduled therefor. One correct answer is received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 0000 after adoption of the evaluation and 4 implemented shift operations.

[0084] At the start of the sixth time period (P6) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives only three instead of the expected 4 answers (ANS) of the processor (PC). Two answers (ASN) are assessed as correct by the first evaluation means (AVAL). One of the answers (ASN) is assessed as not correct by the first evaluation means (AVAL). The three expected answers are received in the reception time period (b) scheduled therefor. No answer is received in the reception time period (a) not scheduled therefor. The missing answer is assessed here for example as a not correct answer. The content of the shift register (SR) in this example is then 0110 after adoption of the evaluation and 3 implemented shift operations.

[0085] At the start of the seventh time period (P7) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives only three instead of the expected 4 answers (ANS) of the processor (PC). One answer (ASN) is assessed as correct by the first evaluation means (AVAL). Two of the answers (ASN) is assessed as not correct by the first evaluation means (AVAL). The three expected answers are received in the reception time period (b) scheduled therefor. No answer is received in the reception time period (a) not scheduled therefor. The missing answer is assessed here for example as a not correct answer. The content of the shift register (SR) in this example is then 0001 after adoption of the evaluation and 3 implemented shift operations.

[0086] At the start of the eighth time period (P8) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives 5 instead of the expected 4 answers (ANS) of the processor (PC). Two answers (ASN) are assessed as correct by the first evaluation means (AVAL). Three of the answers (ASN) are assessed as not correct by the first evaluation means (AVAL). Four expected answers are received in the reception time period (b) scheduled therefor. One answer is received in the reception time period (a) not scheduled therefor. The additional answer with correct content is assessed here for example as a not correct answer. The content of the shift register (SR) in this example is then 1000 after adoption of the evaluation and 5 implemented shift operations.

[0087] At the start of the ninth time period (P9) the content of the shift register (SR) is reset to a reset value, here for example 0000. In this time period the watchdog (WDG) receives 4 of the expected 4 answers (ANS) of the processor (PC). One answer (ASN) is assessed as correct by the first evaluation means (AVAL). Three of the answers (ASN) are assessed as not correct by the first evaluation means (AVAL). Three expected answers are received in the reception time period (b) scheduled therefor. One answer is received in the reception time period (a) not scheduled therefor. The content of the shift register (SR) in this example is then 0010 after adoption of the evaluation and 4 implemented shift operations.

[0088] In this example of FIG. 8 the second evaluation means (VAL) count the last 4 answers of the processor (PC) to the watchdog (WDG) evaluated as correct in the form of a count value (NO). The second evaluation means (VAL) in this example compare this count value (NO) thus determined with a fourth threshold value. If the count value (NO) in this example lies below the fourth threshold value of 3, an evaluation signal (BW) is thus set. If the count value is above it, this exemplary evaluation signal (BW) is reset.

[0089] The value of this evaluation signal (BW) is adopted for example at the end of each time period, i.e. at the end of the respective scheduled reception time period (b) for the answers (ANS), into a further shift register (SR.sub.B), which here represents the further result memory (ES.sub.B).

[0090] The checking result in the form of the logical level of the evaluation signal (BW) in the first time period (P1) and in the second time period (B2) is therefore evaluated with a 1-level, which means correct here, and in the other time periods is evaluated with a 0-level, which means not correct here.

[0091] These checking results thus stored in the further shift register (SR.sub.B) are evaluated by further second evaluation means (VAL.sub.B). This is implemented here for example by counting the 1-levels within the further shift register (SR.sub.B). A second count value (CCNT.sub.B) is hereby determined by the further second evaluation means (VAL.sub.B).

[0092] The further second evaluation means (VAL.sub.B) compare this second count value (CCNT.sub.B) for example with a first threshold value, which here is 1 for example. If the second count value (CCNT.sub.B) lies below the first threshold value, the control signal (RES) in the example of FIG. 8 is thus set and otherwise is not set.

[0093] The further second evaluation means (VAL.sub.B) compare the second count value (CCNT.sub.B) in the example of FIG. 8 with a second threshold value, which here is 5 for example. If the second count value (CCNT.sub.B) lies below the second threshold value, the first warning signal (WRN) in the example of FIG. 8 is thus set and otherwise is not set.

[0094] The further second evaluation means (VAL.sub.B) compare the second count value (CCNT.sub.B) in the example of FIG. 8 with a third threshold value, which here is 3 for example. If the second count value (CCNT.sub.B) lies below the third threshold value, the second warning signal (WRN2) in the example of FIG. 8 is thus set and otherwise is not set.

[0095] The example of FIG. 9 corresponds again in its basic structure to FIG. 2. The evaluation of the shift register (SR) by the second evaluation means (VAL), however, is now implemented differently from the evaluation corresponding to FIGS. 5 to 7. Now it is not the number of correct answers that are stored in the shift register (SR) as 1-information that is evaluated, but instead the pattern. Here, the second evaluation means attempt to detect the pattern 0101. If this is present in a region in four successive shift register cells of the shift register (SR), in this example an internal evaluation signal (here C0101) is set to 1. An upward/downward counter (CCNT) of the second evaluation means (VAL) counts upward at the end of each time period (P1 to P9) if the evaluation signal (C0101) is 1, and downward if it is 0. If the value of the upward/downward counter (CCNT) is above a first threshold value (here 2), the first warning signal (WRN) is set. If the value of the upward/downward counter (CCNT) is above a second threshold value (not stated here), the second warning signal (WRN2) is set. If the value of the upward/downward counter (CCNT) is above a third threshold value (not stated here), the control signal (RES) is set.

[0096] The disclosure can also be described alternatively by one of the following groups of features, wherein the groups of features can be combined with one another arbitrarily and also individual features of a group of features can be combined with one or more features of one or more other groups of features and/or one or more of the previously described examples.

[0097] 1. A device for monitoring a processor (PC), [0098] comprising a watchdog (WDG) and [0099] comprising a clock generator (CTR) as part of the watchdog (WDG), and [0100] comprising a shift register (SR) as part of the watchdog (WDG), and [0101] comprising n buffered information items (Inf.sub.1 to Inf.sub.n), which are stored in n shift register cells, which form the shift register (SR), wherein n is a positive integral number greater than 1, and [0102] which can be continuously numbered from 1 to n, [0103] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has a unique logical shift register position from n shift register positions which are continuously numbered from 1 to n, and [0104] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has at least one first information portion and possibly can have further information portions, and [0105] comprising first stimulating means (QSTM) as part of the watchdog (WDG) for transmission of messages (MSG) from the watchdog (WDG) to the processor (PC), and [0106] comprising first evaluation means (AVAL) as part of the watchdog (WDG) for evaluation of answers (ANS) of the processor PC) to the watchdog (WDG), and [0107] wherein the watchdog (WDG) is operative to send messages (MSG) to the processor (PC), [0108] that can pertain to the processor (PC) itself and to further system components (SC), and [0109] wherein the processor (PC) is operative to transmit answers (ANS) to the watchdog (WDG) depending on these messages (MSG), [0110] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0111] wherein an answer (ANS) is correct [0112] if its content coincides with at least one possible expected content, and [0113] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0114] wherein an answer (ANS) is not correct [0115] if the content of the answer (ANS) does not coincide with at least one possible expected content, or [0116] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b), and [0117] wherein the shift register (SR), upon each reception of an answer (ANS) of the processor (PC), [0118] deletes the n-th buffered information item (Inf.sub.n) at the n-th logical shift register position in a shift register cell of the shift register (SR) from this shift register (SR), and [0119] shifts each of the (n1) buffered information items from the respective j-th logical shift register position (p.sub.j, with 1j(n1)) to the (j+1)-th logical shift register position (p.sub.j, with 2jn), and [0120] uses, in correspondence to a logical value for correct or for not correct, at least the result of the evaluation of the received answer (ANS) by the processor (PC) at least as a new first portion of the new 1-th buffered information item (Inf.sub.1).

[0121] 2. The device according to feature 1, comprising an additional second evaluation means (VAL) as part of the watchdog (WDG) for evaluation of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), wherein the second evaluation means (VAL), depending on buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.n) in the memory cells of the shift register (SR), generate at least one control signal (RES) which can change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.

[0122] 3. The device according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0123] 4. The device according to any one of the preceding features, [0124] wherein to a first expected answer (ANSI.), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b1) as predetermined reception time period (b) for the evaluation of the first expected answer (ANSI.) after reception by the watchdog (WDG) as answer (ANS), and [0125] wherein to a first expected answer (ANS2), there is assigned, by the first evaluation means (AVAL), a predetermined second reception time period (b2) as predetermined reception time period (b) for the evaluation of the second expected answer (ANS2) after reception by the watchdog (WDG) as answer (ANS), and [0126] wherein the predetermined first reception time period (b1) and the predetermined second reception time period (b2) are different and overlap each other, and [0127] wherein the predetermined first reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and [0128] wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer (ANS1).

[0129] 5. The device according to any one of the preceding features, [0130] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0131] wherein an answer (ANS) is additionally correct [0132] if, within the predetermined reception time period (b), the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS), and [0133] wherein an answer (ANS) is additionally not correct [0134] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0135] 6. The device according to any one of the preceding featured, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0136] 7. The device according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor (PC) by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on the buffered information items Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0137] 8. The device according to any one of the preceding features, characterized in that [0138] second evaluation means (VAL) are operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to additionally generate at least one further evaluation, and [0139] in that at least one buffered information item (Inf.sub.j) of the buffered information items Inf.sub.j to Inf.sub.n) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information portion in addition to said first information portion.

[0140] 9. The device according to any one of the preceding features, characterized in that the second evaluation means (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to generate additionally at least one second further evaluation.

[0141] 10. The device according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct at the end of the predetermined reception period (b).

[0142] 11. The device according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0143] 12. The device according to one or more of the preceding features, [0144] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0145] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0146] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number greater than 1, and [0147] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0148] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0149] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0150] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), and [0151] wherein the further shift register (SR.sub.B), upon each reception of an answer of the processor (PC), [0152] deletes the m-th buffered information item (Inf.sub.mB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0153] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0154] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0155] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items (Inf.sub.jB) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0156] 13. The device according to one or more of the preceding features, [0157] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0158] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0159] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0160] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0161] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0162] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0163] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0164] wherein the further shift register (SR.sub.B), at the end of a reception time period (b) or at each end of a reception time period (b), [0165] deletes the m-th further buffered information item (Inf.sub.mB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0166] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0167] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0168] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items (Inf.sub.jB) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0169] 14. The device according to one or more of the preceding features, [0170] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0171] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0172] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0173] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0174] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0175] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0176] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0177] wherein the further shift register (SR.sub.B), at the end of a predetermined or preset number q of successive reception time periods (b), [0178] deletes the m-th further buffered information item (Inf.sub.mB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0179] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0180] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0181] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0182] 15. The device according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct.

[0183] 16. The device according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0184] 17. A device for monitoring a processor (PC) in particular according to any one of the preceding features: [0185] comprising a watchdog (WDG) and [0186] comprising a clock generator (CTR) as part of the watchdog (WDG), and [0187] comprising a result memory (ES) as part of the watchdog (WDG), and [0188] comprising n buffered information items (Inf.sub.1 to Inf.sub.n), which are stored in n result memory cells, which form the result memory(ES), wherein n is a positive integral number greater than 1, and [0189] which can be continuously numbered from 1 to n, [0190] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has a unique logical result memory position from n logical result memory positions which are continuously numbered from 1 to n, and [0191] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has at least one first information portion and possibly can have further information portions, and [0192] comprising first stimulating means (QSTM) as part of the watchdog (WDG) for transmission of messages (MSG) from the watchdog (WDG) to the processor (PC), and [0193] comprising first evaluation means (AVAL) as part of the watchdog (WDG) for evaluation of answers (ANS) of the processor PC) to the watchdog (WDG), and [0194] wherein the watchdog (WDG) sends messages (MSG) to the processor (PC), [0195] that can pertain to the processor (PC) itself and to further system components (SC), and [0196] wherein the processor (PC) is operative to transmit answers (ANS) to the watchdog (WDG) depending on these messages (MSG), [0197] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0198] wherein an answer (ANS) is correct [0199] if its content coincides with at least one possible expected content, and [0200] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0201] wherein an answer (ANS) is not correct [0202] if the content of the answer (ANS) does not coincide with at least one possible expected content, or [0203] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b), and [0204] wherein the result memory(ES), upon each reception of an answer (ANS) of the processor (PC), [0205] deletes a buffered information item (e.g. Inf.sub.j) at the j-th logical result memory position in a result memory cell of the result memory (ES) from this result memory (ES), wherein 1jn and [0206] shifts the remaining (n1) buffered information items (Inf.sub.k), wherein 1kn and kj, from the respective k-th result memory position (p.sub.k, with 1km and kj) to another logical result memory position (p.sub.k, with kk and 1kn), and [0207] uses, in correspondence to a logical value for correct or for not correct, at least the result of the evaluation of the received answer (ANS) by the processor (PC) at least as new first portion of the j-th buffered information item (e.g. Inf.sub.j) at the logical result memory position into which none of the remaining (n1) buffered information items has been shifted.

[0208] 18. The method in particular according to any one of the preceding features, [0209] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0210] wherein the second evaluation means (VAL), depending on buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.m) of the result memory cells of the result memory (ES), generate at least one control signal (RES) adapted to change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.

[0211] 19. The device in particular according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0212] 20. The method in particular according to any one of the preceding features, [0213] wherein to a first expected answer (ANSI.), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b1) as predetermined reception time period (b) for the evaluation of the first expected answer (ANSI.) after reception by the watchdog (WDG) as answer (ANS), and [0214] wherein to a first expected answer (ANS2), there is assigned, by the first evaluation means (AVAL), a predetermined second reception time period (b2) as predetermined reception time period (b) for the evaluation of the second expected answer (ANS2) after reception by the watchdog (WDG) as answer (ANS), and [0215] wherein the predetermined first reception time period (b1) and the predetermined second reception time period (b2) are different and overlap each other, and [0216] wherein the predetermined first reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and [0217] wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer (ANS1).

[0218] 21. The device in particular according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0219] 22. The method in particular according to any one of the preceding features, [0220] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0221] wherein an answer (ANS) is additionally correct [0222] if, within the predetermined reception time period (b), the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS), and [0223] wherein an answer (ANS) is additionally not correct [0224] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or falls short of a predetermined minimal number of to-be-received answers (ANS).

[0225] 23. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0226] 24. The device according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on the buffered information items Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0227] 25. The device in particular according to any one of the preceding features, characterized in that [0228] a second evaluation means (VAL) are operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), to additionally generate at least one further evaluation, and [0229] in that at least one buffered information item (Inf.sub.j) of the buffered information items Inf.sub.j to Inf.sub.n) of the result memory (ES) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information portion in addition to said first information portion.

[0230] 26. The device in particular according to any one of the preceding features, characterized in that the second evaluation means (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), to generate additionally at least one further evaluation.

[0231] 27. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to not correct.

[0232] 28. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to correct.

[0233] 29. The device according to one or more of the preceding features, [0234] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), and [0235] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0236] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number greater than 1, and [0237] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0238] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m logical further result memory positions which are continuously numbered from 1 to m, [0239] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0240] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0241] wherein the further result memory (ES.sub.B), upon each reception of an answer of the processor (PC), [0242] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1jm, and [0243] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1km and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0244] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Infi.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0245] wherein the further evaluation means (VALB), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0246] 30. The device according to one or more of the preceding features, [0247] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), [0248] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0249] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number, and [0250] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0251] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m further result memory positions which are continuously numbered from 1 to m, and [0252] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0253] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0254] wherein the further result memory (ES.sub.B), at the end of a reception time period (b) or at each end of a reception time period (b), [0255] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1jm, and [0256] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1jm and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0257] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0258] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0259] 31. The device according to one or more of the preceding features, [0260] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), and [0261] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0262] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number, and [0263] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0264] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m further result memory positions which are continuously numbered from 1 to m, and [0265] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0266] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0267] wherein, in the further result memory (ES.sub.B), at the end of a predetermined or preset number q of successive reception time periods (b), [0268] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1jm, and [0269] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1km and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0270] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0271] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC). [0272] 32. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to not correct.

[0273] 33. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to correct.

[0274] 34. A device for monitoring a processor (PC) in particular according to any one of the preceding features, [0275] comprising a watchdog (WDG) and [0276] comprising a clock generator (CTR) as part of the watchdog (WDG), and [0277] comprising a shift register (SR) as part of the watchdog (WDG), and [0278] comprising n buffered information items (Inf.sub.1 to Inf.sub.n), which are stored in n shift register cells, which form the shift register (SR), wherein n is a positive integral number greater than 1, and [0279] which can be continuously numbered from 1 to n, [0280] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has a unique logical shift register position from n shift register positions which are continuously numbered from 1 to n, and [0281] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has at least one first information portion and possibly can have further information portions, and [0282] comprising first stimulating means (QSTM) as part of the watchdog (WDG) for transmission of messages (MSG) from the watchdog (WDG) to the processor (PC), and [0283] comprising first evaluation means (AVAL) as part of the watchdog (WDG) for evaluation of answers (ANS) of the processor PC) to the watchdog (WDG), and [0284] wherein the watchdog (WDG) sends messages (MSG) to the processor (PC), [0285] that can pertain to the processor (PC) itself and to further system components (SC), and [0286] wherein the processor (PC) is operative to transmit answers (ANS) to the watchdog (WDG) depending on these messages (MSG), [0287] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0288] wherein an answer (ANS) is correct [0289] if its content coincides with at least one possible expected content, and [0290] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0291] wherein an answer (ANS) is not correct [0292] if the content of the answer (ANS) does not coincide with at least one possible expected content, or [0293] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b), and [0294] wherein the shift register (SR), at least at the end of the predetermined reception time period (b) or at each end of a predetermined reception time period (b), [0295] deletes the n-th buffered information item (Inf.sub.n) at the n-th logical shift register position in a shift register cell of the shift register (SR) from this shift register (SR), and [0296] shifts each of the (n1) buffered information items from the respective j-th logical shift register position (p.sub.j, with 1j(n1)) to the (j+1)-th logical shift register position (p.sub.j, with 2jn), and [0297] uses, in correspondence to a logical value for correct or for not correct, at least the result of the evaluation of the received answer (ANS) by the processor (PC) at least as a new first portion of the new 1-th buffered information item (Inf.sub.1).

[0298] 35. The method in particular according to any one of the preceding features, [0299] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0300] wherein the second evaluation means (VAL), depending on buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.m) in the memory cells of the shift register (SR) generate at least one control signal (RES) adapted to change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.

[0301] 36. The device in particular according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0302] 37. The method in particular according to any one of the preceding features, [0303] wherein to a first expected answer (ANS1), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b1) as predetermined reception time period (b) for the evaluation of the first expected answer (ANSI.) after reception by the watchdog (WDG) as answer (ANS), and [0304] wherein to a first expected answer (ANS2), there is assigned, by the first evaluation means (AVAL), a predetermined second reception time period (b2) as predetermined reception time period (b) for the evaluation of the second expected answer (ANS2) after reception by the watchdog (WDG) as answer (ANS), and [0305] wherein the predetermined first reception time period (b1) and the predetermined second reception time period (b2) are different and overlap each other, and [0306] wherein the predetermined first reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and [0307] wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer (ANS1).

[0308] 38. The device in particular according to any one of the preceding features, [0309] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0310] wherein an answer (ANS) is additionally correct [0311] if, within the predetermined reception time period (b), the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS), and [0312] wherein an answer (ANS) is additionally not correct [0313] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0314] 39. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0315] 40. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0316] 41. The device in particular according to any one of the preceding features, characterized in that [0317] a second evaluation means (VAL) are operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to additionally generate at least one further evaluation, and [0318] in that at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information portion in addition to said first information portion.

[0319] 42. The device in particular according to any one of the preceding features, characterized in that the second evaluation means (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to additionally generate at least one second further evaluation.

[0320] 43. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct.

[0321] 44. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0322] 45. The device according to one or more of the preceding features, [0323] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0324] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0325] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number greater than 1, and [0326] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0327] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0328] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0329] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0330] wherein the further shift register (SR.sub.B), upon each reception of an answer of the processor (PC), [0331] deletes the m-th further buffered information item (Inf.sub.nB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0332] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0333] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0334] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0335] 46. The device according to one or more of the preceding features, [0336] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0337] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0338] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0339] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0340] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0341] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0342] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0343] wherein the further shift register (SR.sub.B), at the end of a reception time period (b) or at each end of a reception time period (b), [0344] deletes the m-th further buffered information item (Inf.sub.mB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0345] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0346] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0347] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0348] 47. The device according to one or more of the preceding features, [0349] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0350] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0351] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further shift register cells, which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0352] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0353] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further shift register position from m logical further shift register positions which are continuously numbered from 1 to m, and [0354] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0355] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0356] wherein the further shift register (SR.sub.B), at the end of a predetermined or preset number q of successive reception time periods (b), [0357] deletes the m-th further buffered information item (Inf.sub.mB) at the m-th logical further shift register position in a shift register cell of the further shift register (SR.sub.B) from this further shift register (SR.sub.B), and [0358] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th logical further shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th logical further shift register position (p.sub.j, with 2jm), and [0359] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0360] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0361] 48. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct.

[0362] 49. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0363] 50. A device for monitoring a processor (PC) in particular according to any one of the preceding features, [0364] comprising a watchdog (WDG) and [0365] comprising a clock generator (CTR) as part of the watchdog (WDG), and [0366] comprising a result memory (ES) as part of the watchdog (WDG), and [0367] comprising n buffered information items (Inf.sub.1 to Inf.sub.n), which form the result memory(ES), wherein n is a positive integral number greater than 1, and [0368] which can be continuously numbered from 1 to n, [0369] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has a unique result memory position from n result memory positions which can be continuously numbered from 1 to n, and [0370] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has at least one first information portion and possibly can have further information portions, and [0371] comprising first stimulating means (QSTM) as part of the watchdog (WDG) for transmission of messages (MSG) from the watchdog (WDG) to the processor (PC), and [0372] comprising first evaluation means (AVAL) as part of the watchdog (WDG) for evaluation of answers (ANS) of the processor PC) to the watchdog (WDG), and [0373] wherein the watchdog (WDG) is operative to send messages (MSG) to the processor (PC), [0374] that can pertain to the processor (PC) itself and to further system components (SC), and [0375] wherein the processor (PC) is operative to transmit answers (ANS) to the watchdog (WDG) depending on these messages (MSG), [0376] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0377] wherein an answer (ANS) is correct [0378] if its content is correct and [0379] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0380] wherein an answer (ANS) is not correct [0381] if the content of the answer (ANS) is not correct or [0382] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b), and [0383] wherein the result memory (ES), at the end of the predetermined reception time period (b) or at each end of the predetermined reception time period (b), [0384] deletes a buffered information item (e.g. Inf.sub.n) from the result memory (ES), and [0385] shifts the remaining (n1) buffered information items from the original result memory position to another result memory position, and [0386] uses, in correspondence to a logical value for correct or for not correct, at least the result of the evaluation of the received answer (ANS) by the processor (PC) at least as new first portion of the new buffered information item (e.g. Inf.sub.1) at the result memory position into which none of the remaining (n1) buffered information items has been shifted.

[0387] 51. The device in particular according to any one of the preceding features, [0388] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0389] wherein the second evaluation means (VAL), depending on the content of the shift register (SR) generate at least one control signal (RES) adapted to change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.

[0390] 52. The device in particular according to any one of the preceding features, wherein the processor (PC) is connectable to the watchdog for monitoring.

[0391] 53. The device in particular according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0392] 54. The method in particular according to any one of the preceding features, [0393] wherein to a first expected answer (ANS1), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b1) as predetermined reception time period (b) for the evaluation of the first expected answer (ANSI.) after reception by the watchdog (WDG) as answer (ANS), and [0394] wherein to a first expected answer (ANS2), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b2) as predetermined reception time period (b) for the evaluation of the second expected answer (ANS2) after reception by the watchdog (WDG) as answer (ANS), and [0395] wherein the predetermined first reception time period (b1) and the predetermined second reception time period (b2) are different and overlap each other, and [0396] wherein the predetermined first reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and [0397] wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer (ANS1).

[0398] 55. The device in particular according to any one of the preceding features, [0399] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0400] wherein an answer (ANS) is additionally correct [0401] if, within the predetermined reception time period (b), the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS), and [0402] wherein an answer (ANS) is additionally not correct [0403] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0404] 56. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0405] 57. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR).

[0406] 58. The device in particular according to any one of the preceding features, characterized in that [0407] a second evaluation means (VAL) are operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to additionally generate at least one further evaluation, and [0408] in that at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL).

[0409] 59. The device in particular according to any one of the preceding features, characterized in that the second evaluation means (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with and 1jn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), to additionally generate at least one second further evaluation.

[0410] 60. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct.

[0411] 61. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0412] 62. The device according to one or more of the preceding features, [0413] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0414] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0415] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which form the further shift register (SR.sub.B), wherein m is a positive integral number greater than 1, and [0416] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0417] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical shift register position from m shift register positions which are continuously numbered from 1 to m, and [0418] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0419] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0420] wherein the further shift register (SR.sub.B), upon each reception of an answer of the processor (PC), [0421] deletes the m-th further buffered information item (Inf.sub.nB) from the further shift register (SR.sub.B), and [0422] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th shift register position (p.sub.j, with 2jm), and [0423] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0424] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items (Inf.sub.jB) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0425] 63. The device according to one or more of the preceding features, [0426] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0427] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0428] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0429] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0430] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical shift register position from m shift register positions which are continuously numbered from 1 to m, and [0431] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0432] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0433] wherein the further shift register (SR.sub.B), at the end of a reception time period (b) or at each end of a reception time period (b), [0434] deletes the m-th further buffered information item (Inf.sub.nB) from the further shift register (SR.sub.B), and [0435] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th shift register position (p.sub.j, with 2jm), and [0436] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0437] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items (Inf.sub.jB) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0438] 64. The device according to one or more of the preceding features, [0439] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0440] comprising at least one further shift register (SR.sub.B) as part of the watchdog (WDG), and [0441] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which form the further shift register (SR.sub.B), wherein m is a positive integral number, and [0442] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0443] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical shift register position from m shift register positions which are continuously numbered from 1 to m, and [0444] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0445] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), and [0446] wherein the further shift register (SR.sub.B), at the end of a predetermined or preset number q of successive reception time periods (b), [0447] deletes the m-th further buffered information item (Inf.sub.nB) from the further shift register (SR.sub.B), and [0448] shifts each of the (m1) buffered information items (Inf.sub.jB) from the respective j-th shift register position (p.sub.j, with 1j(m1)) to the (j+1)-th shift register position (p.sub.j, with 2jm), and [0449] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the new 1-th further buffered information item (Inf.sub.1B) or as a new 1-th further buffered information item (Inf.sub.1B), and [0450] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items (Inf.sub.jB) of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0451] 65. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to not correct.

[0452] 66. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR) are set to a value corresponding to correct.

[0453] 67. A method for monitoring a processor (PC) in particular according to any one of the preceding features, comprising the following steps: [0454] presetting, by a clock generator (CTR), a scheduled reception time period for an answer (ANS) of the processor (PC) to a watchdog (WDG); [0455] transmitting, from the watchdog (WDG) to the processor (PC), one or a plurality of messages (MSG) with contents which can pertain to the processor (PC) itself and/or to further system components (SC); [0456] responding to the message (MSG) in form of an answer (ANS) to the watchdog (WDG), performed by the processor (PC) depending on at least the content of one of these messages; [0457] evaluating at least one answer (ANS) of the processor (PC) to the watchdog

[0458] (WDG) as correct or not correct, performed by the watchdog (WDG), for generating an evaluation result; [0459] wherein an answer (ANS) is correct [0460] if its content is correct and [0461] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0462] wherein an answer (ANS) is not correct [0463] if the content of the answer (ANS) is not correct or [0464] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b); [0465] changing the content of a result memory (ES) with n buffered information items (Inf.sub.1 to Inf.sub.n) with a first information portion and optionally further information portions with n as an integer larger than 1, and with [0466] in each case a unique result memory position, [0467] temporally after reception of an answer (ANS) by the watchdog (WDG) or [0468] temporally at the end of the scheduled reception time period (b) by [0469] deleting at least one buffered information item (Inf.sub.k) of the n information items (Inf.sub.1 to Inf.sub.n), and [0470] changing at least one result memory position of at least one buffered information item (Inf.sub.j) from n information items (Inf.sub.1 to Inf.sub.n) in a result memory (ES) and [0471] using the result of the evaluation of the at least one received response (ANS) as a new first information portion of a new buffered information item (Inf.sub.1) in the result memory (ES).

[0472] 68. The method in particular according to any one of the preceding features, [0473] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), comprising the additional step, [0474] evaluation of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) by second evaluation means (VAL), [0475] generating at least one control signal (RES) which can change the state of the processor (PC), or generating a signal from which such a control signal (RES) is derived.

[0476] 69. The method in particular according to any one of the preceding features, comprising the additional step [0477] fixing a first predetermined reception time period (b1) depending on a first expected answer (ANS1) for use as a predetermined reception time period (b) in the evaluation of this first answer (ANS1) of the processor (PC) when received as answer by the watchdog (WDG); [0478] fixing a second predetermined reception time period (b2) depending on a second expected answer (ANS2) for use as a predetermined reception time period (b) in the evaluation of this second answer (ANS2) of the processor (PC) when received as answer (ANS) by the watchdog (WDG); [0479] wherein the first predetermined reception time period (b1) and the second predetermined reception time period (b2) overlap and the first predetermined reception time period (b1) for the second answer (ANS2) has no effect for the evaluation, and the second predetermined reception time period (b2) for the first answer (ANS1) has no effect for the evaluation.

[0480] 70. The method in particular according to any one of the preceding features, comprising the modified step [0481] evaluation of the answer (ANS) of the processor (PC) as correct or not correct, [0482] wherein an answer (ANS) is now additionally correct [0483] if, within the respective predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS). [0484] wherein an answer (ANS) is now additionally not correct [0485] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0486] 71. The method in particular according to any one of the preceding features, comprising the modified step of evaluating the answer (ANS) of the processor (PC) additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0487] 72. The method in particular according to any one of the preceding features, comprising the modified step of evaluating the answer (ANS) of the processor (PC) additionally depending on the buffered information item (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0488] 73. The method in particular according to any one of the preceding features, comprising the additional step [0489] the additional generation of at least one further evaluation by second evaluation means (VAL) depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES); [0490] storing this further evaluation as a further information portion of a buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0491] 74. The method in particular according to any one of the preceding features, comprising the additional step of generating a second further evaluation depending on the occurrence of predetermined patterns among at least respectively a portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES).

[0492] 75. The method in particular according to any one of the preceding features, comprising the additional step of, at the end of the predetermined reception time period (b), setting the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) to a value corresponding to not correct or all to a value corresponding to correct.

[0493] 76. The method in particular according to one or more of the preceding steps, comprising the additional steps [0494] evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) for generating a further evaluation result; [0495] changing the content of a second result memory (ES.sub.B) with m further buffered information items (Inf.sub.1B to Inf.sub.mB) with a first information portion and optionally further information portions, with m as an integer larger than 1, and with [0496] in each case a unique further result memory position, [0497] temporally after reception of an answer (ANS) by the watchdog (WDG) or [0498] temporally at the end of the scheduled reception time period (b) by [0499] deleting at least one further buffered information item (Inf.sub.k) of the m information items (Inf.sub.1B to Inf.sub.mB), and [0500] changing at least one result memory position of at least one further buffered information item (Inf.sub.jB) from m further buffered information items (Inf.sub.1B to Inf.sub.mB) in the further result memory (ES.sub.B) and [0501] using the further evaluation result as a new first information portion of a new further buffered information item (Inf.sub.1) in the further result memory (ES.sub.B), [0502] evaluating at least two of the m further buffered information items (Inf.sub.1B to Inf.sub.mB), and [0503] generating a control signal (RES) that is adapted to change the state of the processor (PCT) depending on the result of this evaluation.

[0504] 77. A device for monitoring a processor (PC) in particular according to any one of the preceding features: [0505] comprising a watchdog (WDG) and [0506] comprising a clock generator (CTR) as part of the watchdog (WDG), and [0507] comprising a result memory (ES) as part of the watchdog (WDG), and [0508] comprising n buffered information items (Inf.sub.1 to Inf.sub.n), which are stored in n result memory cells, which form the result memory(ES), wherein n is a positive integral number greater than 1, and [0509] which can be continuously numbered from 1 to n, [0510] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has a unique logical result memory position from n logical result memory positions which are continuously numbered from 1 to n, and [0511] wherein each of the n buffered information items (Inf.sub.1 to Inf.sub.n) has at least one first information portion and possibly can have further information portions, and [0512] comprising first stimulating means (QSTM) as part of the watchdog (WDG) for transmission of messages (MSG) from the watchdog (WDG) to the processor (PC), and [0513] comprising first evaluation means (AVAL) as part of the watchdog (WDG) for evaluation of answers (ANS) of the processor PC) to the watchdog (WDG), and [0514] wherein the watchdog (WDG) sends messages (MSG) to the processor (PC), [0515] that can pertain to the processor (PC) itself and to further system components (SC), and [0516] wherein the processor (PC) is operative to transmit answers (ANS) to the watchdog (WDG) depending on these messages (MSG), [0517] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0518] wherein an answer (ANS) is correct [0519] if its content coincides with at least one possible expected content, and [0520] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0521] wherein an answer (ANS) is not correct [0522] if the content of the answer (ANS) does not coincide with at least one possible expected content, or [0523] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b), and [0524] wherein the result memory (ES), at the end of the predetermined reception time period (b) or at each end of the predetermined reception time period (b), [0525] deletes a buffered information item (e.g. Inf.sub.j) at the j-th logical result memory position in a result memory cell of the result memory (ES) from this result memory (ES), wherein 1jn, and [0526] shifts the remaining (n1) buffered information items (Inf.sub.k), wherein 1kn and kj, from the original logical result memory position (p.sub.k, with 1km and kj) to another logical result memory position (p.sub.k, with kk and 1kn), and [0527] uses, in correspondence to a logical value for correct or for not correct, at least the result of the evaluation of the received answer (ANS) by the processor (PC) at least as new first portion of the j-th buffered information item (e.g. Inf.sub.j) at the logical result memory position into which none of the remaining (n1) buffered information items has been shifted.

[0528] 78. The method in particular according to any one of the preceding features, [0529] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the shift register (SR), [0530] wherein the second evaluation means (VAL), depending on buffered information items of the n buffered information items (Inf.sub.1 to Inf.sub.m) in the result memory cells of the result memory (ES), generates at least one control signal (RES) adapted to change the state of the processor (PC), or generates a signal from which such a control signal (RES) is derived.

[0531] 79. The device in particular according to any one of the preceding features, comprising further monitorable system components (SC) as part of the processor.

[0532] 80. The method in particular according to any one of the preceding features, [0533] wherein to a first expected answer (ANSI.), there is assigned, by the first evaluation means (AVAL), a predetermined first reception time period (b1) as predetermined reception time period (b) for the evaluation of the first expected answer (ANSI.) after reception by the watchdog (WDG) as answer (ANS), and [0534] wherein to a first expected answer (ANS2), there is assigned, by the first evaluation means (AVAL), a predetermined second reception time period (b2) as predetermined reception time period (b) for the evaluation of the second expected answer (ANS2) after reception by the watchdog (WDG) as answer (ANS), and [0535] wherein the predetermined first reception time period (b1) and the predetermined second reception time period (b2) are different and overlap each other, and [0536] wherein the predetermined first reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and [0537] wherein the predetermined second reception time period (b2) has no effect for the evaluation of the first answer (ANS1).

[0538] 81. The method in particular according to any one of the preceding features, [0539] wherein the watchdog (WDG) is operative, by means of the first evaluation means (AVAL), to assess the answer (ANS) of the processor (PC) as correct or not correct, and [0540] wherein an answer (ANS) is additionally correct [0541] if, within the predetermined reception time period (b), the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS), and [0542] wherein an answer (ANS) is additionally not correct [0543] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0544] 82. The device in particular according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0545] 83. The device according to any one of the preceding features, characterized in that the evaluation of the answer (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) is additionally depending on the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0546] 84. The device in particular according to any one of the preceding features, characterized in that [0547] a second evaluation means (VAL) are operative, depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), to additionally generate at least one further evaluation, and [0548] in that at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information portion in addition to said first information portion.

[0549] 85. The device in particular according to any one of the preceding features, characterized in that the second evaluation means (VAL) is operative, depending on the occurrence of predetermined patterns among at least respectively one information portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), to generate additionally at least one further evaluation.

[0550] 86. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to not correct.

[0551] 87. The device in particular according to any one of the preceding features, characterized in that, at the end of the predetermined reception time period (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to correct.

[0552] 88. The device according to one or more of the preceding features, [0553] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the n buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), and [0554] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0555] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number greater than 1, and [0556] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0557] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m logical further result memory positions which are continuously numbered from 1 to m, [0558] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0559] comprising further evaluation means (VALB) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0560] wherein the further result memory (ES.sub.B), upon each reception of an answer of the processor (PC), [0561] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1jm and [0562] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1km and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0563] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0564] wherein the further evaluation means (VALB), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0565] 89. The device according to one or more of the preceding features, [0566] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), [0567] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0568] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number, and [0569] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0570] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m further result memory positions which are continuously numbered from 1 to m, and [0571] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0572] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0573] wherein the further result memory (ES.sub.B), at the end of a reception time period (b) or at each end of a reception time period (b), [0574] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1jm and [0575] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1km and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0576] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0577] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0578] 90. The device according to one or more of the preceding features, [0579] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), and [0580] comprising at least one further result memory (ES.sub.B) as part of the watchdog (WDG), and [0581] comprising m further buffered information items (Inf.sub.1B to Inf.sub.mB), which are stored in m further result memory cells, which form the further result memory (ES.sub.B), wherein m is a positive integral number, and [0582] wherein the m further buffered information items (Inf.sub.1B to Inf.sub.mB) are continuously numbered from 1 to m, and [0583] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) has a unique logical further result memory position from m logical further result memory positions which are continuously numbered from 1 to m, [0584] wherein each of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) comprises at least a first information portion, and optionally can comprise further information portions, and [0585] comprising further evaluation means (VAL.sub.B) as part of the watchdog (WDG) for evaluating the further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further result memory (ES.sub.B), and [0586] wherein, in the further result memory (ES.sub.B), at the end of a predetermined or preset number q of successive reception time periods (b), [0587] deletes the j-th further buffered information item (Inf.sub.jB) at the j-th logical further result memory position in a result memory cell of the further result memory (ES.sub.B) from the further result memory (ES.sub.B), wherein 1km, and [0588] shifts each of the (m1) buffered information items (Inf.sub.kB), wherein 1km and kj, from the respective k-th logical further result memory position (p.sub.k, with 1km and kj) to another logical further result memory position (p.sub.k, with kk and 1km), and [0589] uses at least the result of the further evaluation of the second evaluation means (VAL) at least as a new first portion of the j-th further buffered information item (Inf.sub.jB) or as a new j-th further buffered information item (Inf.sub.jB) at the logical further result memory position into which none of the remaining (m1) buffered further information items has been shifted, and [0590] wherein the further evaluation means (VAL.sub.B), depending on further buffered information items of the m further buffered information items (Inf.sub.1B to Inf.sub.mB) of the further shift register (SR.sub.B), generate a control signal (RES) adapted to change the state of the processor (PC).

[0591] 91. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to not correct.

[0592] 92. The device in particular according to any one of the preceding features, characterized in that, at the end of a number q of successive reception time periods (b), the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) are set to a value corresponding to correct.

[0593] 93. The method for monitoring a processor (PC) in particular according to any one of the preceding features, comprising the following steps: [0594] presetting, by a clock generator (CTR), a scheduled reception time period for an answer (ANS) of the processor (PC) to a watchdog (WDG); [0595] transmitting, from the watchdog (WDG) to the processor (PC), one or a plurality of messages (MSG) with contents which can pertain to the processor (PC) itself and/or to further system components (SC); [0596] responding to the message (MSG) in form of an answer (ANS) to the watchdog

[0597] (WDG), performed by the processor (PC) depending on at least the content of one of these messages; [0598] evaluating at least one answer (ANS) of the processor (PC) to the watchdog (WDG) as correct or not correct, performed by the watchdog (WDG), for generating an evaluation result; [0599] wherein an answer (ANS) is correct [0600] if its content coincides with at least one possible expected content, and [0601] if the answer (ANS) is received by the watchdog (WDG) within a predetermined reception time period (b), and [0602] wherein an answer (ANS) is not correct [0603] if the content of the answer (ANS) does not coincide with at least one possible expected content, or [0604] if the answer (ANS) is not received by the watchdog (WDG) within the predetermined reception time period (b); [0605] changing the content of a result memory (ES) with n buffered information items (Inf.sub.1 to Inf.sub.n) each with a first information portion per buffered information item (Inf.sub.1 to Inf.sub.n) and optionally further information portions per buffered information item (Inf.sub.1 to Inf.sub.n) with n as an integer larger than 1, and with [0606] in each case a unique logical result memory position, [0607] temporally after reception of an answer (ANS) by the watchdog (WDG) or [0608] temporally at the end of the scheduled reception time period (b) by [0609] deleting at least one buffered information item (Inf.sub.k) of the n information items (Inf.sub.1 to Inf.sub.n), and [0610] changing at least one logical result memory position of at least one buffered information item (Inf.sub.j) from n information items (Inf.sub.1 to Inf.sub.n) in a result memory (ES) and [0611] using the result of the evaluation of the at least one received response

[0612] (ANS) as a new first information portion of a new buffered information item (Inf.sub.1) in the result memory (ES).

[0613] 94. The method in particular according to any one of the preceding features, [0614] comprising an additional second evaluation means (VAL) as part of the watch-dog (WDG) for evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES), comprising the additional step, [0615] evaluating the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) by second evaluation means (VAL) by generating an evaluation result depending on buffered information items of the buffered information items (Inf.sub.1 to Inf.sub.n), and [0616] generating at least one control signal (RES) which can change the state of the processor (PC), or generating a signal from which such a control signal (RES) is derived depending on said evaluation result.

[0617] 95. The method in particular according to any one of the preceding features, comprising the additional step [0618] fixing a first predetermined reception time period (b1) depending on a first expected answer (ANS1) for use as a predetermined reception time period (b) in the evaluation of this first answer (ANS1) of the processor (PC) when received as answer by the watchdog (WDG); [0619] fixing a second predetermined reception time period (b2) depending on a second expected answer (ANS2) for use as a predetermined reception time period (b) in the evaluation of this second answer (ANS2) of the processor (PC) when received as answer (ANS) by the watchdog (WDG); [0620] wherein the first predetermined reception time period (b1) and the second predetermined reception time period (b2) overlap and the first predetermined reception time period (b1) has no effect for the evaluation of the second answer (ANS2), and the second predetermined reception time period (b2) has no effect for the evaluation for the first answer (ANS1).

[0621] 96. The method in particular according to any one of the preceding features, comprising the modified step [0622] evaluation of the answer (ANS) of the processor (PC) as correct or not correct, [0623] wherein an answer (ANS) is now additionally only correct [0624] if, within the predetermined reception time period (b), additionally also the number of answers (ANS) received by the watchdog (WDG) does not exceed, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or additionally also at the end of the predetermined reception time period (b), does not fall short of a predetermined minimal number of to-be-received answers (ANS). [0625] wherein an answer (ANS) is now additionally not correct [0626] if, within the predetermined reception time period (b), the number of the answers (ANS) received by the watchdog (WDG) exceeds, due to the received answer (ANS), a predetermined maximal number of to-be-received answers (ANS) or, at the end of the predetermined reception time period (b), falls short of a predetermined minimal number of to-be-received answers (ANS).

[0627] 97. The method in particular according to any one of the preceding features, comprising the modified step of evaluating the answer (ANS) of the processor (PC) in additional dependence on at least one information portion of a buffered information item (Inf.sub.j) of the buffered information items Inf.sub.j to Inf.sub.n) of the result memory (ES) in addition to the dependence of this evaluation of the answer (ANS) of the processor (PC) to the watchdog (WDG).

[0628] 98. The method in particular according to any one of the preceding features, comprising the modified step of evaluating the answer (ANS) of the processor (PC) in additional dependence on the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES) in addition to the dependence of this evaluation of the answer (ANS) of the processor (PC) to the watchdog (WDG).

[0629] 99. The method in particular according to any one of the preceding features, comprising the additional step [0630] additional generation of at least one further evaluation by second evaluation means (VAL) depending on at least one buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES); [0631] storing this further evaluation as a further information portion of a buffered information item (Inf.sub.j) of the buffered information items (Inf.sub.j to Inf.sub.n) of the result memory (ES).

[0632] 100. The method in particular according to any one of the preceding features, comprising the additional step of generating a second further evaluation depending on the occurrence of predetermined patterns among at least respectively a portion of at least two different buffered information items (Inf.sub.j, Inf.sub.k, with 1jn and 1kn and jk) of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES).

[0633] 101. The method in particular according to any one of the preceding features, comprising the additional step of, at the end of the predetermined reception time period (b), setting the first information portions of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) to a value corresponding to not correct or all to a value corresponding to correct.

[0634] 102. The method in particular according to one or more of the preceding steps, comprising the additional steps [0635] evaluation of the buffered information items (Inf.sub.1 to Inf.sub.n) of the result memory (ES) for generating a further evaluation result; [0636] changing the content of a second result memory (ES.sub.B) with m further buffered information items (Inf.sub.1B to Inf.sub.mB) with a first information portion and optionally further information portions, wherein m is an integer larger than 1, and with [0637] in each case a unique further logical result memory position [0638] temporally after reception of an answer (ANS) by the watchdog (WDG) or [0639] temporally at the end of the scheduled reception time period (b) by [0640] deleting at least one further buffered information item (Inf.sub.k) of the m information items (Inf.sub.1B to Inf.sub.mB) in the further result memory (ES.sub.B), and [0641] changing at least one logical result memory position of at least one further buffered information item (Inf.sub.jB) from m further buffered information items (Inf.sub.1B to Inf.sub.mB) in the further result memory (ES.sub.B) and [0642] use of the further evaluation result as a new first information portion of a new further buffered information item (Inf.sub.1) in the further result memory (ES.sub.B). [0643] evaluating at least two of the m further buffered information items (Inf.sub.1B to Inf.sub.mB), and [0644] generating at least one control signal (RES) and/or at least one further control signal (WRN, WRN2) adapted to change the state of the processor (PC), depending on the result of this evaluation.

Glossary

[0645] Buffered information items (Inf.sub.1 to Inf.sub.n) and (Inf.sub.1B to Inf.sub.nB). Buffered information items (Inf.sub.1 to Inf.sub.n) and further buffered information items (Inf.sub.1B to Inf.sub.nB) are understood in the sense of the disclosure to mean data sets comprising at least one datum. In the simplest case, information is concerned that is correct or not correct, which is then preferably encoded in a bit, for example as logic 1 or logic 0. As discussed above in the description, however, it is conceivable to perform more complex evaluations and thus to use evaluation vectors as individual buffered information items.

Result Memory

[0646] A result memory in the sense of the disclosure consists of a plurality of (n or m) result memory cells. Each result memory cell can store an information item (Inf.sub.j) or (Inf.sub.jB). Each of the information items can comprise a plurality of sub-information itemsalso referred to as information portions. These can thus be a more complex data structure. In the simplest case, however, an information item of this kind is merely a bit. Each of the n or m information items (Inf.sub.1 to Inf.sub.n) or (Inf.sub.1B to Inf.sub.mB) buffered in the result memory can be assigned a logical and a physical result memory position. In the case of a trigger event the n or m information items (Inf.sub.1 to Inf.sub.n) or (Inf.sub.1 to Inf.sub.m) is shifted or scrambled in the result memory in a predeterminable way. This can be implemented purely logically by changing the logical result memory positions or by actual displacement of the n or m information (Inf.sub.1 to Inf.sub.n) or (Inf.sub.1 to Inf.sub.m) in the result memory to other result memory cells, that is to say by changing the physical result memory positions. A predetermined information item of the buffered information items (Inf.sub.1 to Inf.sub.n) or (Inf.sub.1 to Inf.sub.m) of the result memory is at least partially overwritten and thus deleted by an evaluation value determined by evaluation means (AVAL, VAL) in the case of the trigger event. Of course, writing and deletion can also be performed sequentially in succession. In the simplest case a write/read pointer within the result memory, in the case of each trigger event, can be positioned in a new result memory cell in a predeterminable way, which is then overwritten by the evaluation result to be buffered. All of the result memory cells are preferably overwritten once before a result memory cell is overwritten once more.

Trigger Event

[0647] A trigger event for the shifting of a shift register or the restructuring of the information items in the result memory (as described below under result memory) can be the reception of an answer (ANS) of the processor by the watchdog (WDG) or the reception of each answer (ANS) of the processor by the watchdog (WDG) or the end of the predetermined reception time period (b) or the end of a predetermined or preset number q of successive reception periods of time (b), typically, but not necessarily, separated by other time periods (a, c). Not every answer (ANS) of the processor (PC) has to be a trigger signal. However, it is preferred if every answer (ANS) of the processor (PC) is a trigger signal.

Shift Register (SR)

[0648] Generally, a shaft register is understood to mean a register that in each memory position comprises an individual bit, which with the presence of a clock edge is shifted to the left or right. In the sense of the disclosure, however, the register cells contain not only a bit, but the data sets of the buffered information items (Inf.sub.1 to Inf.sub.n) or (Inf.sub.1B to Inf.sub.mB). A data set of this kind of a buffered information item (Inf.sub.j) or (Inf.sub.jB) may also consist of just one bit, but does not have to. In order to enable the shift operation, the data structure of the register cells must be the same, regardless of whether or not the register cells are used.

LIST OF REFERENCE SIGNS

[0649] a first time period, in which no reception of answers (ANS) is scheduled. The time period does not overlap chronologically with the second time period (c), at which there is no evaluation of answers (ANS) by the watchdog (WDG), or with the scheduled reception time period (b) for an answer (ANS) of the processor (PC). The time length of a first time period can be 0. The time length of the first time period can vary from first time period to first time period. [0650] ANS answer of the processor (PC) to one or more messages (MSG) that the first stimulating means (QSTM) has sent as part of the watchdog (WDG) to the processor (PC). [0651] ANS1 first answer of the processor (PC) [0652] ANS2 second answer of the processor (PC) [0653] AVAL first evaluation means (AVAL). The first evaluation means are part of the watchdog (WDG). They are used to evaluate answers (ANS) of the processor (PC) to the watchdog (WDG) prompted by messages (MSG) which the first stimulating means (QSTM) sent from the watchdog (WDG) to the processor (PC) and which the processor should have answered with the aforementioned answers (ANS) at correct times and with expected contents and in the correct number, which can then be checked in turn by the first evaluation means of the watchdog (WDG). [0654] b second time period, also referred to as scheduled reception time period for an answer (ANS). The time length of a second time period must be greater than 0. The time length of the second time period can vary from second time period to second time period. [0655] b1 first reception time period for the first answer (ANS1) [0656] b2 second reception time period for the second answer (ANS2) [0657] BW evaluation signal [0658] c third time period (c), in which there is no evaluation of answers (ANS) by the watchdog. The third time period does not overlap chronologically with the first time period (a), in which there is no reception of answers (ANS), or with the scheduled reception time period (b), i.e. the second time period, for an answer (ANS) of the processor (PC). The time length of a third time period can be 0. The time length of the third time period can vary from third time period to third time period. [0659] CCNT.sub.B second count value [0660] CTR internal clock generator (CTR), which is part of the watchdog (WDG). [0661] ES result memory, which is part of the watchdog (WDG) and consists of result memory cells. Each result memory cell of the result memory is continuously numbered by a number from 1 to n. This means that each result memory cell on the one hand has a real physical result memory cell position and on the other hand has a logical result memory cell position which must not be identical to the real physical result memory cell position. The result memory can be embodied as a shift register (SR). [0662] ES.sub.B further result memory, which is part of the watchdog (WDG) and consists of further result memory cells. Each further cell of the further result memory is continuously numbered by a number from 1 to m. This means that each cell of the further result memory on the one hand has a real physical further cell position and on the other hand has a logical cell position which must not be identical to the real physical further cell position. The further result memory can be embodied as a (further) shift register (SR.sub.B). [0663] Inf.sub.1 first buffered information item in the result memory (ES) or in the shift register (SR). [0664] Inf.sub.j j-th buffered information item in the result memory (ES) or in the shift register (SR). [0665] Inf.sub.n n-th buffered information item in the result memory (ES) or in the shift register (SR). [0666] Inf.sub.1B first further buffered information item in the further result memory (ES.sub.B) or in the further shift register (SR.sub.B). [0667] Inf.sub.jB j-th further buffered information item in the further result memory (ES.sub.B) or in the further shift register (SR.sub.B). [0668] Inf.sub.mB m-th further buffered information item in the further result memory (ES.sub.B) or in the further shift register (SR.sub.B). [0669] MSG messages sent by the first stimulating means (QSTM) as part of the watchdog (WDG) to the processor (PC), which then answers with answers (ANS) in scheduled time periods (b) and with expected contents and in the correct number, which can be checked by the watchdog (WDG). [0670] n number of buffered information items (Inf.sub.1 to Inf.sub.n) contained by the result memory (ES) or the shift register (SR). [0671] NO count value This is for example the number of correct evaluations assessed as correct and stored in the result memory. [0672] m number of (further) buffered information items (Inf.sub.1B to Inf.sub.mB) contained by the further result memory (ES.sub.B) or the further shift register (SR.sub.B). [0673] PC processor [0674] p.sub.1 first result memory position or first shift register position of the first result memory cell or the first shift register cell. [0675] p.sub.j j-th result memory position or j-th shift register position of the j-th result memory cell or the j-th shift register cell. [0676] p.sub.n n-th result memory position or n-th shift register position of the n-th result memory cell or the n-th shift register cell. [0677] p.sub.1B first result memory position or first shift register position of the first result memory cell of the further result memory or the first shift register cell of the further shift register. [0678] p.sub.jB j-th result memory position or j-th shift register position of the j-th result memory cell or the j-th shift register cell. [0679] p.sub.mB m-th result memory position or m-th shift register position of the m-th result memory cell or the m-th shift register cell. [0680] q number of the successive predetermined reception time periods (b), at the end of which the evaluation content of the result memory (ES) or of the shift register, at least in the form of the first portions of the information items (Inf.sub.1 to Inf.sub.n)(SR) buffered in this result memory (ES) or in this shift register (SR) is set to a value corresponding to correct or not correct, which corresponds to a reset operation of the result memory (ES) or of the shift register (SR). The entire result memory (ES) or the entire shift register (SR) is preferably reset. [0681] P1 to P26 temporal time periods [0682] QSTM first stimulating means (QSTM) The first stimulating means are part of the watchdog (WDG). They send messages (MSG) from the watchdog (WDG) to the processor (PC), which then answers these with answers (ANS) at correct times and with expected contents and in the correct number, which can be checked by the watchdog (WDG). [0683] RES control signal adapted to change the state of the processor (PC). It is typically a reset signal, which the processor (PC) necessarily sets into a predefined state, or an interrupt signal, which prompts the processor (PC) to interrupt the current program implementation and to implement a predefined program portion. [0684] SC system components [0685] SR shift register, which is part of the watchdog (WDG) and comprises shift register cells. Each shift register cell of the shift register is continuously numbered by a number from 1 to n. This means that each shift register cell on the one hand has a real physical shift register cell position and on the other hand has a logical shift register cell position which must not be identical to the real physical shift register cell position. In the sense of the disclosure a shift register falls under the term result memory (ES). [0686] SR.sub.B further shift register, which is part of the watchdog (WDG) and comprises (further) shift register cells. Each (further) shift register cell of the further shift register is continuously numbered by a number from 1 to m. This means that each further shift register cell on the one hand has a real physical (further) shift register cell position and on the other hand has a logical (further) shift register cell position which must not be identical to the real physical (further) shift register cell position. In the sense of the disclosure a further shift register falls under the term further result memory (ES.sub.B). [0687] VAL second evaluation means, which are part of the watchdog (WD). They evaluate the information items (Inf.sub.1 to Inf.sub.n) buffered in the result memory (ES) or in the shift register (SR). Here, the second evaluation means may also generate more than just one evaluation as appropriate. For example, it can define the number of correct information items in the result memory cells of the result memory (ES) or in the shift register cells of the shift register (SR) and can compare this with a threshold value. If the number lies below the first further threshold value, the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set, for example. Further signals can also be generated as the result of further evaluations, which are based for example on specific patterns in the result memory cells of the result memory (ES) or in the shift register cells of the shift register (SR). [0688] VAL.sub.B further second evaluation means, which are part of the watchdog (WD). They evaluate the m further information items (Inf.sub.1B to Inf.sub.mB) buffered in the further shift register (SR.sub.B). Here, the evaluation means may also generate more than just one evaluation as appropriate. For example, the further number of correct information items in the (further) result memory cells of the further result memory (ES.sub.B) or in the (further) shift register cells of the further shift register (SR.sub.B) can be defined and can be compared with a further threshold value. If this further number lies below this first further threshold value, the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set, for example. Further signals can also be generated as the result of (further) evaluations, which are based for example on specific patterns in the (further) result memory cells of the further result memory (ES.sub.B) or (further) shift register cells of the further shift register (SR.sub.B). [0689] WD window signal. In the examples a 1-level is intended to mean that no answers (ANS) are expected and that answers (ANS) of the processor (PC) in these time periods with a 1-level are assessed as not correct, regardless of their content. In a time period with a 0-level of the signal, answers (ANS) preferably in a predetermined number are expected. If the contents thereof are correct, i.e. corresponds to a content determinable in advance, they are assessed as correct. A deviating number of answers (ANS) may also lead to a not correct evaluation as applicable. [0690] WDG watchdog [0691] WRN first warning signal of the watchdog (WDG) to the processor (PC). [0692] WRN2 second warning signal of the watchdog (WDG) to the processor (PC).