SAFETY CONCEPT IN ELECTRONIC THROTTLE CONTROL OF INTERNAL COMBUSTION ENGINE CONTROLLERS

In a method for monitoring a function computer in a control unit which controls the generation of torque by an internal combustion engine, a maximum acceptable torque value is determined from a driver request. A torque actual value is determined from operational characteristic variables of the internal combustion engine and is compared with the maximum acceptable value. The air supply is limited when there is an unacceptably large actual value. The method is distinguished by the fact that the limitation takes place when a fault counter reading exceeds a threshold value. The fault counter reading is increased if the torque actual value is higher than the maximum acceptable torque value and is reduced by a predetermined value if the torque actual value is lower than the maximum acceptable value. In addition, a control unit which is configured to carry out the method is presented.