In accordance with a further advantageous embodiment, a first functional block that permits direct access to hardware of the embedded device is arranged in a first level, that is the lowest level, with a function belonging to the first functional block in particular permitting direct access to a network interface. The network interface can be identical to the data interface or it can permit a separate data connection. The functions of the first functional block can, for example, enable the direct control of the hardware of the data interface or of a fieldbus interface (e.g. CAN bus—controller area network bus or SERCOS 3). The firmware of the embedded device can in particular enable the access to the hardware. Since access to the hardware can enable the complete control of the embedded device, the first functional block is arranged in the lowest level that offers the greatest security.

In accordance with a further advantageous embodiment, a second functional block that permits direct access to an operating system kernel of the embedded device is arranged in a second level that is disposed above the first level. In this respect, a function belonging to the second functional block in particular permits direct access to a file system. The file system can belong to the firmware of the embedded device or can be generated by the firmware.

In accordance with a further advantageous embodiment, a third functional block that permits access to the executed application program is arranged in a third level that is disposed above the second level. In this respect, a function belonging to the third functional block in particular permits a monitoring of the executed application program. A monitoring of the application program, but also of the firmware, can therefore be carried out by means of the third functional block.