DE102019000494A1 - Method for operating a communication network of a vehicle - Google Patents

Abstract

The invention relates to a method for operating a communication network (E) of a vehicle, which is provided according to the invention that for each as a sensor (S) acting control unit (S1 to Sn, SK) as part of a basic software (BSW) on a plane a whole Vehicle communication of a control unit (S1 to Sn, SK) is merged and a copy of each message as part of the vehicle communication is made, whereby the respective copy is signed by means of a cryptic method with a time stamp and a key, this with the time stamp and the key signed messages in situations with a threshold below bus and system utilization are sent to a control unit (SK) for correlation formation, these messages signed with the time stamp and the key are cached locally until the formation of correlation.

Description

The invention relates to a method for operating a communication network of a vehicle.

From the EP 2 873 567 A1 For example, a vehicle intrusion detection system and a method for detecting various types of intrusion into a vehicle are known. The vehicle intrusion detection system comprises a first sensor unit by means of which light or a signal reflected on an object is detected. The first sensor unit then generates a first detection signal, which is detected by a control unit that controls the first sensor unit. By means of a second sensor unit, a rotation or inclination or an impact is detected on the vehicle and the sensor unit then generates a second detection signal, which is supplied to the control unit. A first step for detecting a break-in to the vehicle is based on the first detection signal of the first sensor unit. Subsequently, it is checked whether the second detection signal from the second sensor unit has a certain level for a predetermined time. In a second step, when the intrusion into the vehicle is detected on the basis of the first detection signal, a transmission level of a transmitter of the first sensor unit is increased above a transmission level and the vehicle intrusion is re-examined. In a third step, when the vehicle crash is detected for a certain time or longer in the second step, intrusion into the vehicle is detected or determined, and it is determined whether there is an external simple impact based on the first detection signal based on is filtered to the second detection signal.

The invention has for its object to provide a comparison with the prior art improved method for operating a communication network of a vehicle.

The object is achieved by the features specified in claim 1.

Advantageous embodiments of the invention are the subject of the dependent claims.

A method for operating a communication network, for example, a so-called intrusion detection system, a vehicle according to the invention provides that for each acting as a sensor controller as part of a basic software on a level an entire vehicle communication of a control unit is merged and each message as part of the vehicle communication A copy is made, the respective copy being signed by means of a cryptographic method with a time stamp and with a key, these messages signed with the time stamp and the key being sent in situations with a threshold below bus and system utilization to a correlation formation control unit, these messages signed with the time stamp and the key are locally buffered until the correlation is formed.

By using the method, vehicle communication is no longer focused on a central location and can interface independently with multi-interface controllers, e.g. B. primary interfaces and fallback interfaces, done. In addition, the method is topology-independent and requires comparatively less computing power at a position.

Controllers with a so-called gateway functionality may be enabled to forward data from the intrusion detection system to a correlation location, without the need for this controller to be trusted with the gateway functionality.

Embodiments of the invention will be explained in more detail below with reference to a drawing.

• 1 schematisch ein Kommunikationsnetzwerk eines Fahrzeuges.

It shows:

• 1 schematically a communication network of a vehicle.

In the only figure is a communication network e , For example, a so-called intrusion detection system, a vehicle shown, wherein the communication network e a number of controllers S1 to Sn, SK includes, as sensors S , in particular IDS sensors, to detect a burglary. In particular, each of the controllers S1 to sn . SK assigned to a function.

A problem of a communication network e A vehicle is a distributed collection of vehicle communications while maintaining, regardless of whether these vehicle communications on bus systems, over point-to-point connections or electronic interfaces for electrical consumers. These vehicle communications will then be in the communication network e merged.

In particular, the vehicle communication with respect to the communication network e to decentralize, is a method described below for operating such a communication network e intended.

For each control unit S1 to sn . SK which as a sensor S of the intruder detection system e acts as part of a basic software BSW on one level, the entire vehicle communication of the respective control unit S1 to sn . SK merged. Regardless of which physical interface a message is received or sent as part of the vehicle communication.

At this level of the base software BSW a copy is made by each embassy using a suitable cryptographic method, such as ECC / CMAC and / or RSA , signed with a timestamp and a key.

The messages of the respective control unit signed with the time stamp and the key S1 to sn . SK be as data D , Especially in times with comparatively low bus and system utilization of a control unit SK with a collector module K sent to the correlation formation. That is, the data D at a below a predetermined threshold bus and system utilization to the controller SK be sent.

Below the bus and system utilization at the time of sending the data D not the default threshold, the data will be D cached locally until correlation formation.

The data D with the messages signed with a time stamp and a key as detected sensor values are in the collector module K the control unit S1 to Sn, SK merged. It is at a central location, especially in the collector module K a chronological sequence of this data D based on the timestamp in the digital signature, so that the messages can be sorted with information about a sender and a receiver in a correct order. Subsequently, well-known analysis methods for burglary detection can be applied.

A correlation formation of the data D can also be outside the vehicle in a central computer unit R take place, the data D for this purpose of the collector module K about a suitable module M , often based on mobile technology, for example via a so-called optical LTE module, to the central computer unit R be transmitted.

An integrity-protected transmission also allows direct shipping over relatively insecure networks, such as the Internet. However, the method described above allows for relatively secure transmission over relatively unstable communication channels.

LIST OF REFERENCE NUMBERS

BSW

basic software

D

dates

e

Communication network

K

collector module

M

module

R

central computer unit

S

sensor

SK

control unit

S1 to Sn

control unit

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• EP 2873567 A1 [0002]

Claims (3)

Method for operating a communication network (E) of a vehicle, characterized in that - for each sensor (S) acting control unit (S1 to Sn, SK) as part of a basic software (BSW) on one level, an entire vehicle communication of a control unit (S1 to Sn, SK) and a copy is made of each message as part of the vehicle communication, wherein - the respective copy is signed by means of a cryptographic method with a time stamp and a key, where - this with the time stamp and the key signed messages in Situations with a threshold below bus and system utilization are sent to a control unit (SK) for correlation formation, these messages signed with the time stamp and the key are cached locally until the formation of correlation. Method according to Claim 1 , characterized in that signed sensor values of all messages of the respective control device (S1 to Sn, SK) acting as sensor (S) are combined in a collector module (K). Method according to Claim 1 or 2 , characterized in that the correlation formation also takes place outside the vehicle in a central computer unit (R).

Images