Translation of "Sicherheitsbaustein" in English

This is also carried out in parallel in safety module 16 .

This is realized through a special security module and a security algorithm integrated within the latter.

The interface module, the safety module and the processor are positioned in a control device.

In parallel to this, safety module 4 also tests its function.

The safety module is connectable to the input device or is integrated in the input device.

The safety module is formed as adapter and can be connected through a simple plug-in connector.

In further embodiments, the secure hardware component is formed by a security module protected against unauthorized access.

This safety module is connected to the same SPI bus as the sensors and the microcontroller.

The safety module monitors the sensor data transferred over the SPI bus and compares them with the stored limit values.

Safety module 105 then enables output stages 107 and 108 via line 106 .

The safety module represents the redundant hardware path for checking the sensor values with respect to release decisions.

Processor 6 is connected to firing circuit control 15 via a data input/output, to which safety module 16 is also connected via a data input.

Firing circuit control 15 releases restraint device 7 only when both processor 6 and its release algorithm and the safety module each recognize a release-relevant situation independently of each other with the aid of sensor data.

The device according to claim 7, wherein the processor, the interface module and the safety module are situated in a control device.

Beyond that, it is possible that these sensor values can also be checked by an interface module which represents a hardware-like redundancy path for the processor, and which also checks the sensor values to see whether a release decision is to be made.

Processor 1 is connected via a data input/output to interface module 2, safety module 4 and firing circuit control 5 .

Interface module 2 will rather transmit permanently stored test values from registers to processor 1 and safety module 4 .

Safety module 4 represents a hardware-like redundant checking of the sensor values, so as to ensure that, in the case of an error function of processor 1, release values for means of restraint 6 are not recognized.

That is why safety module 4 must also be tested with these test values, that is, the emulated sensor values.

Since there is an upper boundary value for the sensor data, a release decision is made by processor 1 and safety module 4, and the firing circuit control will thereupon activate means of restraint 6, but without the occurrence of a release.

Interface module 4 then converts the sensor data into appropriate data messages for transmission to processor 6 and safety module 16 .

For example, the AS3-SV is suitable for use in door switches, light barriers, as a safe output for a control, or as a safety module for emergency OFF applications.

In particular, this software separation kernel is a security module (“Trusted Platform”), in order to protect all resources, especially CPU, storage and hardware abstractions from unauthorized access and also from access by the respectively other radio unit.

Method according to claim 1, wherein the decoding unit comprises a security component, where the narrowband key information is stored and which performs the generation of the broadband key information.

Provision is made in this context for the processor to transfer those emulated sensor values via the MISO line, through which the processor normally receives data, in order thereby to simulate the emulated sensor values to the safety module.

If a sensor exceeds defined thresholds, this safety module then, independently of the microcontroller, delivers a plausibility signal for the triggering of specific ignition circuits.