EP1605410A2 - Tachograph - Google Patents

Tachograph Download PDF

Info

Publication number
EP1605410A2
EP1605410A2 EP05104736A EP05104736A EP1605410A2 EP 1605410 A2 EP1605410 A2 EP 1605410A2 EP 05104736 A EP05104736 A EP 05104736A EP 05104736 A EP05104736 A EP 05104736A EP 1605410 A2 EP1605410 A2 EP 1605410A2
Authority
EP
European Patent Office
Prior art keywords
microcontroller
memory
tachograph
tachograph according
display
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP05104736A
Other languages
German (de)
French (fr)
Other versions
EP1605410B1 (en
EP1605410A3 (en
Inventor
Jochen Kiemes
Reinhard Ewald Stumpe
Gerhard Rombach
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Continental Automotive GmbH
Original Assignee
Siemens AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG filed Critical Siemens AG
Priority to PL05104736T priority Critical patent/PL1605410T3/en
Publication of EP1605410A2 publication Critical patent/EP1605410A2/en
Publication of EP1605410A3 publication Critical patent/EP1605410A3/en
Application granted granted Critical
Publication of EP1605410B1 publication Critical patent/EP1605410B1/en
Not-in-force legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00—Registering or indicating the working of vehicles
    • G07C5/08—Registering or indicating performance data other than driving, working, idle, or waiting time, with or without registering driving, working, idle or waiting time

Definitions

  • the invention relates to a tachograph, the vehicle operating data digitally stored in a store, with a display and controls and with a first microcontroller.
  • the invention has therefore set itself the task of a tachograph to create the type mentioned, the high Requirements for tamper resistance and at the same time in its construction is designed such that minor changes, in particular with regard to the appearance of the picture and user guidance, realized with less effort can be.
  • the invention proposes that the first Microcontroller of the tachograph described above Calculator, an encryption unit, a first memory and having safety sensors as integral components, which safety sensors at least one safety-critical Environmental parameters monitored, namely a clock frequency of the first microcontroller, an operating temperature of the Microcontroller, a supply voltage of the microcontroller, or a resistance value of the microcontroller in the Substantially surrounding protective layer, the first microcontroller with a second microcontroller in a first Connection stands, by means of which data are transferable bar, which second microcontroller by means of a second connection with a Control system or a display system is connected and the Layout of the display or the function of the controls controls.
  • the advantages of a tachograph with such an architecture the first microcontroller and the interaction with a second microcontroller consist mainly in the extensive Integration of the safety functions in the first microcontroller, what the equipment costs in terms of the area of Circuit boards, component diversity and assembly costs significantly reduced. This leads to an increase in the quality of the individual remaining modules also with reduced costs accompanied.
  • the decisive advantage of the inven tion exists especially in the separation of flexibly to handle properties and safety-critical functions of the tachograph.
  • the flexible manageable characteristics whose modification is not a renewal Requires safety certification and the means of the second microcontroller can be realized, taking into account to be easily adapted to customer requirements.
  • the second microcontroller can in this case driver components for a display, in particular for an LCD, if necessary as an integral component. It is beside it appropriate if controls, such as push buttons or knob or the corresponding with these controls Operating systems in communication with the second microcontroller stand, who by means of these controls or operating systems made entries in for the first microcontroller implement appropriate instructions or inputs.
  • the storage of cryptological Key in the first memory by means of which the encryption unit Vehicle operating data encrypted.
  • the first microcontroller has active hardware protection has, for example, a protective layer, the Surrounds semiconductor device and by means of a safety sensor is checked for integrity, it makes sense if that sensitive data is tamper-proof in this way and protected against unauthorized access.
  • the Third memory can be useful as encrypted Memory random access (coded RAM) or encrypted Non-volatile memory (coded flash) formed inexpensively be.
  • the first Microcontroller with a non integrated into the microcontroller Battery communicates the contents of the first memory and one integrated into the microcontroller Real-time clock supplied with the required operating power.
  • the battery voltage from the safety sensors be monitored, with the real-time clock in addition as a manipulation indicator is usable by certain Timestamps subjected to a subsequent evaluation become.
  • the first microcontroller Due to the energetic buffering of the Real-Time-Clock and the memory containing cryptographic keys, the first microcontroller can be switched off from the supply network become. In this way, relatively low supply energies be achieved. This power-down concept is in Motor vehicle where energy sources have limited capacity, especially valuable. If the first microcontroller of a Operating power supply network is designed switchable, is it is expedient, the first microcontroller of the second microcontroller by means of an interrupt line between the two Microcontrollers turn on form.
  • the first microcontroller also depends on measured Vehicle operating data situation appropriate drive a display can
  • the second microcontroller has a data transfer connection is provided, by means of which the first microcontroller transmits vehicle operating data to the second microcontroller, the second microcontroller on the display for Presentation brings.
  • the second microcontroller For recording and evaluation of means of a transmitter measured speed on a transmission component proves a direct connection between the first Microcontroller and the transmitter for signal transmission as appropriate.
  • the second microcontroller have a direct connection to the transmitter, so that for example, a direct representation of the speed without prior evaluation by the first microcontroller a display of the tachograph is possible.
  • the tachograph 1 shown in Fig. 1 is connected to a transmitter 2 in a suitable for data transmission third Connection 3.
  • the transmitter 2 transmits the measured Data, namely the rotational speed n of a transmission component, not shown, by means of a likewise not shown internal encryption unit encrypted to the tachograph 1.
  • the tachograph 1 is the encrypted speed N by means of the third connection 3 both to a first microcontroller 4 and to a second microcontroller 5 transmitted.
  • the first microcontroller 4 is of an active protective layer 6, which consists of conductor tracks, which by means of a Safety sensors 7 are monitored for their integrity.
  • the safety sensor 7 continuously measures a resistance value R of these printed conductors, not shown, or the Protective layer 6 and causes when exceeding or falling below a certain limit, the deletion of cryptological Keys 8, in a first memory 9 of the first Microcontroller 4 are stored and a program code, with which the first microcontroller 4 works.
  • a first memory 9 and the safety sensor 7 are also an encryption unit 11, a real-time clock 12, one between the calculator 10 and the encryption unit 11 arranged cache 13 (cache) and a variety of interfaces managing Component 14 essential components of the first microcontroller 4.
  • the encryption unit 11 is not in the first Microcontroller 4 integrated third memory 15 in connection, namely an encrypted memory random Access (coded RAM) 16 and an encrypted non-volatile Memory (Coded Flash) 17. From the transmitter 2 to the first microcontroller 4 transmitted speed measured values first processed by the calculator 10 and then to the cache 13 is transmitted to the encryption unit 11 for encrypting this r evaluated vehicle operating data accesses, which subsequently in the third Memory 15 are stored.
  • coded RAM encrypted memory random Access
  • Coded Flash encrypted non-volatile Memory
  • a battery 18 provides even in the event of a power failure by means of an external operating power supply network 20 for maintaining the functions of the safety sensors 7, the first memory 9 and the real-time clock 12.
  • first connection 21 is the first microcontroller 4 with the second microcontroller 5 in the data exchange, so that the second microcontroller 5 by means of the component 14th triggering display systems 22 and displays 23.
  • User inputs in the tachograph 1 are possible by means of operating systems 25 or operating elements 26, whose Actuation by means of an interface 30 to the first microcontroller 4 and / or the second microcontroller 5 transmitted become.
  • the safety sensor 7 monitors in addition to the integrity or the resistance value R of the active protective layer 6 also nor the ambient parameters clock frequency F, operating temperature T and supply voltage U. For each of the environmental parameters two limit values are defined, at which Below a deletion of the program files and the cryptological Key 8 is done.
  • the first microcontroller 4 is of the voltage of the operating supply network 20 separable, with an interrupt line 31st between the second microcontroller 5 and the first microcontroller 4 a turn on or a recording of the full operating voltage of the first microcontroller 4, caused by allows the second microcontroller 5.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Time Recorders, Dirve Recorders, Access Control (AREA)
  • Steroid Compounds (AREA)

Abstract

A tachograph for vehicles has a digital design with a primary microprocessor (4) and a secondary microprocessor, or sub-controller. The primary processor includes a memory, a cipher unit, a processing module and a security system and is linked to the secondary processor, or sub-controller (5) by two connections. The sub-controller is linked to a control panel (22) and to a display panel (25). The security system uses operating parameters such as temperature, supply voltage, as well as user entered codes.

Description

Die Erfindung betrifft einen Tachographen , der Fahrzeugbetriebsdaten digital in einem Speicher speichert, mit einer Anzeige und Bedienelementen und mit einem ersten Mikrokontroller.The invention relates to a tachograph, the vehicle operating data digitally stored in a store, with a display and controls and with a first microcontroller.

Die neue Generation von Fahrtschreibern bzw. Tachographen verwendet zur Aufzeichnung der Fahrzeugbetriebsdaten nicht mehr, wie herkömmlich, eine papierne Diagrammscheibe sondern speichert die Daten digital auf einem elektronischen Medium. Ein so genannter digitaler Tachograph ist bereits aus dem deutschen Gebrauchsmuster DE 298 12 216 U1 bekannt. Für den Einsatz in Nutzfahrzeugen muss ein derartiges Gerät von einschlägigen Behörden eine Sicherheitszertifiz ierung erhalten, was sehr aufwändig, zeitintensiv und kostenträchtig ist. Das Verfahren der Zertifizierung muss im Rahmen jeglicher Änderungen an den von der Zertifizierungsinstanz zu überprüfenden Bauteile durchschritten werden, so dass bereits die Berücksichtigung kleinerer Kundenwünsche mit einem sehr hohen behördlichen Aufwand einhergeht.The new generation of tachographs or tachographs used no longer recording the vehicle operating data, as usual, a paper chart but stores the data is digital on an electronic medium. Such a called digital tachograph is already from the German Utility Model DE 298 12 216 U1 known. For use in Commercial vehicles must be such a device of relevant authorities obtained a safety certification, which is very expensive, time consuming and costly. The procedure of Certification must be made in the context of any changes to the the components of the certification body to be inspected so that already the consideration of smaller Customer requests with a very high official effort accompanied.

Die Erfindung hat es sich daher zur Aufgabe gemacht, einen Tachographen der eingangs genannten Art zu schaffen, der den hohen Anforderungen an die Manipulationssicherheit gerecht wird und gleichzeitig in seinem Aufbau derart ausgebildet ist, dass kleinere Änderungen, insbesondere hinsichtlich des Ersche inungsbildes und der Benutzerführung, mit geringerem Aufwand realisiert werden können.The invention has therefore set itself the task of a tachograph to create the type mentioned, the high Requirements for tamper resistance and at the same time in its construction is designed such that minor changes, in particular with regard to the appearance of the picture and user guidance, realized with less effort can be.

Zur Lösung der Aufgabe schlägt die Erfindung vor, dass der erste Mikrokontroller des eingangs beschriebenen Tachographen ein Rechenwerk, eine Verschlüsselungseinheit, einen ersten Speicher und eine Sicherheitssensorik als integrale Bauelemente aufweist, welche Sicherheitssensorik mindestens einen sicherheitskritischen Umgebungsparameter überwacht, nämlich eine Taktfrequenz des ersten Mikrokontrollers, eine Betriebstemperatur des Mikrokontrollers, eine Versorgungsspannung des Mikrokontrollers, oder einen Widerstandswert einer den Mikrokontroller im Wesentlichen umgebenden Schutzschicht, wobei der erste Mikrokontroller mit einem zweiten Mikrokontroller in einer ersten Verbindung steht, mittels derer Daten übertrag bar sind, welcher zweite Mikrokontroller mittels einer zweiten Verbindung mit einem Bediensystem oder einem Anzeigesystem verbunden ist und das Layout der Darstellung der Anzeige oder die Funktion der Bedienelemente steuert.To solve the problem, the invention proposes that the first Microcontroller of the tachograph described above Calculator, an encryption unit, a first memory and having safety sensors as integral components, which safety sensors at least one safety-critical Environmental parameters monitored, namely a clock frequency of the first microcontroller, an operating temperature of the Microcontroller, a supply voltage of the microcontroller, or a resistance value of the microcontroller in the Substantially surrounding protective layer, the first microcontroller with a second microcontroller in a first Connection stands, by means of which data are transferable bar, which second microcontroller by means of a second connection with a Control system or a display system is connected and the Layout of the display or the function of the controls controls.

Die Vorteile eines Tachographen mit einer derartigen Architektur des ersten Mikrokontrollers und das Zusammenwirken mit einem zweiten Mikrokontroller bestehen vor allem in der weitgehenden Integration der Sicherheitsfunktionen in dem ersten Mikrokontroller, was die Gerätekosten in Bez ug auf die Fläche der Leiterplatten, Bauteilevielfalt und Montagekosten erheblich reduziert. Das führt dazu, dass eine Erhöhung der Qualität der einzelnen übrigen Baugruppen gleichfalls mit reduzierten Kosten einhergeht. Der entscheidende Vorteil der Erfin dung liegt vor allem in der Trennung flexibel zu handhabender Eigenschaften und sicherheitskritischer Funktionen des Tachographen. Die flexibel handhabbaren Eigenschaften, deren Änderung keine neuerliche Sicherheitszertifizierung erfordert und die mittels des zweiten Mikrokontrollers realisiert werden, können unter Berücksichtigung von Kundenwünschen leicht angepasst werden. Beispielsweise können dem Kunden ein eigenes Anzeige -Konzept oder besondere Schnittstellenfunktionen angeboten werden, ohne sicherheitsrelevante Funktionen des Tachographen verändern zu müssen. Der zweite Mikrokontroller kann hierbei Treiberbauelemente für eine Anzeige, insbesondere für eine LCD, gegebenenfalls als integrales Bauelement, umfassen. Daneben ist es zweckmäßig, wenn Bedienelemente, beispielsweise Druckknöpfe oder Drehregler bzw. die mit diesen Bedienelementen korrespondierenden Bediensysteme mit dem zweiten Mikrokontroller in Verbindung stehen, der die mittels dieser Bedienelemente bzw. Bediensysteme getätigten Eingaben in für den ersten Mikrokontroller geeignete Anweisungen bzw. Eingaben umsetzt.The advantages of a tachograph with such an architecture the first microcontroller and the interaction with a second microcontroller consist mainly in the extensive Integration of the safety functions in the first microcontroller, what the equipment costs in terms of the area of Circuit boards, component diversity and assembly costs significantly reduced. This leads to an increase in the quality of the individual remaining modules also with reduced costs accompanied. The decisive advantage of the inven tion exists especially in the separation of flexibly to handle properties and safety-critical functions of the tachograph. The flexible manageable characteristics whose modification is not a renewal Requires safety certification and the means of the second microcontroller can be realized, taking into account to be easily adapted to customer requirements. For example can give the customer a custom ad concept or special interface functions are offered, without security-relevant Functions of the tachograph change too have to. The second microcontroller can in this case driver components for a display, in particular for an LCD, if necessary as an integral component. It is beside it appropriate if controls, such as push buttons or knob or the corresponding with these controls Operating systems in communication with the second microcontroller stand, who by means of these controls or operating systems made entries in for the first microcontroller implement appropriate instructions or inputs.

Besonders zweckmäßig ist die Speicherung kryptologischer Schlüssel in dem ersten Speicher, mittels derer die Verschlüsselungseinheit Fahrzeugsbetriebsdaten verschlüsselt. Insbesondere, wenn der erste Mikrokontroller einen aktiven Hardwareschutz aufweist, beispielsweise eine Schutzschicht, die das Halbleiterbauelement umgibt und mittels einer Sicherheitssensorik stetig auf Unversehrtheit überprüft wird, ist es sinnvoll, wenn diese sensiblen Daten in dieser Weise manipulationsgesichert und vor unbefugtem Zugriff geschützt sind.Especially useful is the storage of cryptological Key in the first memory, by means of which the encryption unit Vehicle operating data encrypted. Especially, if the first microcontroller has active hardware protection has, for example, a protective layer, the Surrounds semiconductor device and by means of a safety sensor is checked for integrity, it makes sense if that sensitive data is tamper-proof in this way and protected against unauthorized access.

Ein hohes Maß an Flexibilität hinsichtlich der Ausbildung des Speichermediums, auf dem die Fahrzeugbetriebsdaten digital abgelegt sind, ergibt sich, wenn die Verschlüsselungseinheit mit einem dritten Speicher, der kein integrales Bauelement des ersten Mikrokontrollers ist, in Verbindung steht und die Fahrzeugbetriebsdaten verschlüsselt in dem dritten Speicher speichert. Aufgrund des besonderen Schutzes der Ver schlüsselungseinheit, die dem Mikrokontroller zugeordnet ist und der kryptologischen Schlüssel ermöglicht die Erfindung ohne jegliche Einbuße der Schwierigkeit einer Manipulation eine Ablage der verschlüsselten Fahrzeugsbetriebsdaten in einem ansonsten nicht zwingend gegen mechanische Manipulation geschützten Speichermedium. Der dritte Speicher kann hierbei zweckmäßig als verschlüsselter Speicher wahlfreien Zugriffs (Coded RAM) oder verschlüsselter nichtflüchtiger Speicher (Coded Flash) kostengünstig ausgebildet sein.A high degree of flexibility with regard to the training of the Storage medium on which the vehicle operating data stored digitally are, if the encryption unit with a third memory, which is not an integral component of the first Microcontroller is communicating and the vehicle operating data encrypted in the third memory stores. Due to the special protection of the encryption unit, which is assigned to the microcontroller and the cryptological Key allows the invention without any loss of Difficulty of manipulating a filing of the encrypted Vehicle operating data in one otherwise not mandatory protected against mechanical manipulation storage medium. Of the Third memory can be useful as encrypted Memory random access (coded RAM) or encrypted Non-volatile memory (coded flash) formed inexpensively be.

Zur Gewährleistung der korrekten Funktion auch bei Ausfall einer externen Spannungsversorgung ist es sinnvoll, wenn der erste Mikrokontroller mit einer nicht in den Mikrokontroller integrierten Batterie in Verbindung steht, welche den Inhalt des ersten Speichers und eine in den Mikrokontroller integrierte Real-Time-Clock mit der erforderlichen Betriebsenergie versorgt. Zweckmäßig kann die Batteriespannung von der Sicherheitssensorik überwacht werden, wobei die Real -Time-Clock zusätzlich als Manipulations-Indikator verwendbar ist, indem bestimmte Zeitmarken einer nachträglichen Auswertung unterzogen werden. Aufgrund der energetischen Pufferung der Real -Time-Clock und des Speichers, der kryptologische Schlüssel enthält, kann der erste Mikrokontroller vom Versorgungsnetz abgeschaltet werden. Auf diese Weise können verhältnismäßig niedrige Versorgungsenergien erreicht werden. Dieses Power-Down-Konzept ist im Kraftfahrzeug, wo Energiequellen begrenzte Kapazität aufweisen, besonders wertvoll. Wenn der erste Mikrokontroller von einem Betriebsenergieversorgungsnetz abschaltbar ausgebildet ist, ist es zweckmäßig, den ersten Mikrokontroller von dem zweiten Mikrokontroller mittels einer Interrupt -Leitung zwischen den beiden Mikrokontrollern einschaltbar auszubilden.To ensure the correct function even if one fails external power supply, it makes sense if the first Microcontroller with a non integrated into the microcontroller Battery communicates the contents of the first memory and one integrated into the microcontroller Real-time clock supplied with the required operating power. Suitably, the battery voltage from the safety sensors be monitored, with the real-time clock in addition as a manipulation indicator is usable by certain Timestamps subjected to a subsequent evaluation become. Due to the energetic buffering of the Real-Time-Clock and the memory containing cryptographic keys, the first microcontroller can be switched off from the supply network become. In this way, relatively low supply energies be achieved. This power-down concept is in Motor vehicle where energy sources have limited capacity, especially valuable. If the first microcontroller of a Operating power supply network is designed switchable, is it is expedient, the first microcontroller of the second microcontroller by means of an interrupt line between the two Microcontrollers turn on form.

Damit der erste Mikrokontroller auch abhängig von gemessenen Fahrzeugbetriebsdaten situationsgerecht eine Anzeige ansteuern kann, ist es von Vorteil, wenn zwischen dem ersten Mikrokontroller und dem zweiten Mikrokontroller eine Dat enübertragungsverbindung vorgesehen ist, mittels derer der erste Mikrokontroller dem zweiten Mikrokontroller Fahrzeugbetriebsdaten übermittelt, die der zweite Mikrokontroller auf der Anzeige zur Darstellung bringt. Zur Aufzeichnung und Auswertung der mittels eines Messwertgebers gemessenen Drehzahl an einem Getriebebauelement erweist sich eine direkte Verbindung zwischen dem ersten Mikrokontroller und dem Messwertgeber zur Signalübertragung als zweckmäßig. Gegebenenfalls kann der zweite Mikrokontroller eine direkte Verbindung zu dem Messwertgeber aufweisen, so dass beispielsweise eine direkte Darstellung der Geschwindigkeit ohne vorherige Auswertung durch den ersten Mikrokontroller auf einer Anzeige des Tachographen möglich ist.So that the first microcontroller also depends on measured Vehicle operating data situation appropriate drive a display can, it is advantageous if between the first microcontroller and the second microcontroller has a data transfer connection is provided, by means of which the first microcontroller transmits vehicle operating data to the second microcontroller, the second microcontroller on the display for Presentation brings. For recording and evaluation of means of a transmitter measured speed on a transmission component proves a direct connection between the first Microcontroller and the transmitter for signal transmission as appropriate. Optionally, the second microcontroller have a direct connection to the transmitter, so that for example, a direct representation of the speed without prior evaluation by the first microcontroller a display of the tachograph is possible.

Eine maximale Sicherheit gegen unbefugten Zugriff wird erhalten, wenn die Sicherheitssensorik bei einem Über - oder Unterschreiten eines vorbestimmten Grenzwerts für einen Umgebungsparameter die in dem ersten Speicher gespeicherten kryptologischen Schlüssel löscht. Zusätzlich kann ein Löschen des Programmspeichers in dem ersten Mikrokontroller für diesen Fall vorgesehen sein. Damit der Löschvorgang stets gewährleistet ist, kann eine in den ersten Mikrokontroller integrierte Hilfsenergiepufferung vorgesehen sein.Maximum security against unauthorized access is obtained if the safety sensors are under or overshooting a predetermined threshold for an environmental parameter the cryptological stored in the first memory Delete key. In addition, deleting the program memory in the first microcontroller for this case be provided. So that the deletion process is always guaranteed is, can be integrated into the first microcontroller auxiliary power buffering be provided.

Im Folgenden ist die Erfindung anhand eines Ausführungsbeispiels unter Bezugnahme auf eine Zeichnung näher beschrieben. Es zeigt:

Fig. 1:
eine schematische Darstellung der Funktionsweise des erfindungsgemäßen Tachographen.
In the following the invention with reference to an embodiment with reference to a drawing is described in more detail. It shows:
Fig. 1:
a schematic representation of the operation of the tachograph according to the invention.

Der in Fig. 1 dargestellte Tachograph 1 steht mit einem Messwertgeber 2 in einer zur Datenübertragung geeigneten dritten Verbindung 3. Der Messwertgeber 2 übermittelt die gemessenen Daten, nämlich die Drehzahl n eines nicht dargestellten Getriebebauelements, mittels einer gleichfalls nicht dargestellten internen Verschlüsselungseinheit verschlüsselt an den Tachographen 1. In dem Tachographen 1 wird die verschlüsselte Drehzahl N mittels der dritten Verbindung 3 sowohl an einen ersten Mikrokontroller 4 als auch an einen zweiten Mikrokon troller 5 übermittelt.The tachograph 1 shown in Fig. 1 is connected to a transmitter 2 in a suitable for data transmission third Connection 3. The transmitter 2 transmits the measured Data, namely the rotational speed n of a transmission component, not shown, by means of a likewise not shown internal encryption unit encrypted to the tachograph 1. In the tachograph 1 is the encrypted speed N by means of the third connection 3 both to a first microcontroller 4 and to a second microcontroller 5 transmitted.

Der erste Mikrokontroller 4 ist von einer aktiven Schutzschicht 6 umgeben, die aus Leiterbahnen besteht, welche mittels einer Sicherheitssensorik 7 auf ihre Unversehrtheit überwacht werden. Hierzu misst die Sicherheitssensorik 7 stetig einen Widerstandswert R dieser nicht dargestellten Leiterbahnen bzw. der Schutzschicht 6 und veranlasst bei Überschreiten oder Unterschreiten eines bestimmtes Grenzwerts das Löschen von kryptologischen Schlüsseln 8, die in einem ersten Speicher 9 des ersten Mikrokontrollers 4 gespeichert sind sowie eines Programmcodes, mit dem der erste Mikrokontroller 4 arbeitet. Neben einem Rechenwerk 10, einem ersten Speicher 9 und der Sicherheitssensorik 7 sind auch noch eine Verschlüsselungseinheit 11, eine Real-Time-Clock 12, ein zwischen dem Rechenwerk 10 und der Verschlüsselungseinheit 11 angeordneter Zwischenspeicher 13 (Cache) und ein verschiedener Schnittstellen verwaltendes Bauteil 14 wesentliche Bestandteile des ersten Mikrokontrollers 4. Die Verschlüsselungseinheit 11 steht mit nicht in den ersten Mikrokontroller 4 integrierten dritten Speichern 15 in Verbindung, nämlich einem verschlüsselten Speicher wahlfreie Zugriffs (Coded RAM) 16 und einem verschlüsselten nichtflüchtigen Speicher (Coded Flash) 17. Von dem Messwertgeber 2 an den ersten Mikrokontroller 4 übermittelte Drehzahlmesswerte werden zunächst von dem Rechenwerk 10 verarbeitet und anschließend an den Zwischenspeicher 13 übermittelt, auf den die Verschlüsselungseinheit 11 zur Verschlüsselung diese r ausgewerteten Fahrzeugsbetriebsdaten zugreift, welche anschließend in den dritten Speicher 15 abgelegt werden.The first microcontroller 4 is of an active protective layer 6, which consists of conductor tracks, which by means of a Safety sensors 7 are monitored for their integrity. For this purpose, the safety sensor 7 continuously measures a resistance value R of these printed conductors, not shown, or the Protective layer 6 and causes when exceeding or falling below a certain limit, the deletion of cryptological Keys 8, in a first memory 9 of the first Microcontroller 4 are stored and a program code, with which the first microcontroller 4 works. In addition to a calculator 10, a first memory 9 and the safety sensor 7 are also an encryption unit 11, a real-time clock 12, one between the calculator 10 and the encryption unit 11 arranged cache 13 (cache) and a variety of interfaces managing Component 14 essential components of the first microcontroller 4. The encryption unit 11 is not in the first Microcontroller 4 integrated third memory 15 in connection, namely an encrypted memory random Access (coded RAM) 16 and an encrypted non-volatile Memory (Coded Flash) 17. From the transmitter 2 to the first microcontroller 4 transmitted speed measured values first processed by the calculator 10 and then to the cache 13 is transmitted to the encryption unit 11 for encrypting this r evaluated vehicle operating data accesses, which subsequently in the third Memory 15 are stored.

Eine Batterie 18 sorgt selbst bei Ausfall einer Energieversorgung mittels eines externen Betriebsenergieversorgungsnetzes 20 für die Aufrechterhaltung der Funktionen der Sicherheitssensorik 7, des ersten Speichers 9 und der Real -Time-Clock 12.A battery 18 provides even in the event of a power failure by means of an external operating power supply network 20 for maintaining the functions of the safety sensors 7, the first memory 9 and the real-time clock 12.

Mittels einer ersten Verbindung 21 steht der erste Mikrokontroller 4 mit dem zweiten Mikrokontroller 5 im Datenaustausch, so dass der zweite Mikrokontroller 5 mittels des Bauteils 14 eine Ansteuerung von Anzeigesystemen 22 und Anzeigen 23 veranlasst. Benutzerseitige Eingaben in den Tachographen 1 sind möglich mittels Bediensystemen 25 bzw. Bedienelementen 26, deren Betätigung mittels eines Interfaces 30 an den ersten Mikrokontroller 4 und/oder den zweiten Mikrokontroller 5 übermittelt werden.By means of a first connection 21 is the first microcontroller 4 with the second microcontroller 5 in the data exchange, so that the second microcontroller 5 by means of the component 14th triggering display systems 22 and displays 23. User inputs in the tachograph 1 are possible by means of operating systems 25 or operating elements 26, whose Actuation by means of an interface 30 to the first microcontroller 4 and / or the second microcontroller 5 transmitted become.

Die Sicherheitssensorik 7 überwacht neben der Unversehrtheit bzw. dem Widerstandswert R der aktiven Schutzschicht 6 auch noch die Umgebungsparameter Taktfrequenz F , Betriebstemperatur T und Versorgungsspannung U. Für jeden der Umgebungsparameter sind zwei Grenzwerte definiert, bei deren Überschreiten bzw. Unterschreiten eine Löschung der Programmdateien und der kryptologischen Schlüssel 8 erfolgt.The safety sensor 7 monitors in addition to the integrity or the resistance value R of the active protective layer 6 also nor the ambient parameters clock frequency F, operating temperature T and supply voltage U. For each of the environmental parameters two limit values are defined, at which Below a deletion of the program files and the cryptological Key 8 is done.

Der erste Mikrokontroller 4 ist von der Spannung des Betriebsversorgungsnetzes 20 trennbar, wobei eine Interrupt -Leitung 31 zwischen dem zweiten Mikrokontroller 5 und dem ersten Mikrokontroller 4 ein Einschalten bzw. eine Aufnahme der vollen Betriebsspannung des ersten Mikrokontrollers 4, veranlasst durch den zweiten Mikrokontroller 5 ermöglicht.The first microcontroller 4 is of the voltage of the operating supply network 20 separable, with an interrupt line 31st between the second microcontroller 5 and the first microcontroller 4 a turn on or a recording of the full operating voltage of the first microcontroller 4, caused by allows the second microcontroller 5.

Claims (9)

Tachograph mit einer Anzeige und Bedienelementen, der Fahrzeugbetriebsdaten digital in einem Speicher speichert, mit einem ersten Mikrokontroller (4), dadurch gekennzeichnet, dass der erste Mikrokontroller (4) ein Rechenwerk, eine Verschlüsselungseinheit (11), einen ersten Speicher und eine Sicherheitssensorik (7) als integrale Bauelemente aufweist, welche Sicherheitssensorik (7) mindestens einen sicherheitskritischen Umgebungsparameter überwacht, nämlich eine Taktfrequenz des ersten Mikrokontrollers (4), eine Betriebstemperatur T des Mikrokontrollers, eine Versorgungsspannung (U) des Mikrokontrollers oder einen Widerstandswert (R) einer den Mikrokontroller im Wesentlichen umgebenden Schutzschicht (6), wobei der erste Mikrokontroller (4) mit einem zweiten Mikrokontroller (5) in einer ersten Verbindung (21) steht, mittels derer Daten übertragbar sind, welcher zweite Mikrokontro ller (5) mittels einer zweiten Verbindung mit einem Bediensystem (22) oder einem Anzeigesystem (25) verbunden ist und das Layout der Darstellung der Anzeige (26) oder die Funktion der Bedienelemente (23) steuert.Tachograph with a display and control elements, the vehicle operating data stored digitally in a memory, with a first microcontroller (4), characterized in that the first microcontroller (4) an arithmetic unit, an encryption unit (11), a first memory and a security sensor (7 ) as integral components, which safety sensor (7) monitors at least one safety-critical environmental parameters, namely a clock frequency of the first microcontroller (4), an operating temperature T of the microcontroller, a supply voltage (U) of the microcontroller or a resistance value (R) of the microcontroller in Substantially surrounding protective layer (6), wherein the first microcontroller (4) with a second microcontroller (5) in a first connection (21), by means of which data are transferable, which second Mikrokontro ller (5) by means of a second connection with an operating system (22) or a display system (25) is and controls the layout of the display (26) or the function of the controls (23). Tachograph nach Anspruch 1, dadurch gekennzeichnet, dass in dem ersten Speicher (9) kryptologische Schlüssel (8) gespeichert sind, mittels derer die Verschlüsselungseinheit (11) Fahrzeugbetriebsdaten verschlüsselt.Tachograph according to Claim 1, characterized in that cryptological keys (8) are stored in the first memory (9) by means of which the encryption unit (11) encrypts vehicle operating data. Tachograph nach Anspruch 1, dadurch gekennzeichnet, dass die Verschlüsselungseinheit (11) mit einem dritten Speicher (15), der kein integrales Bauelement des ersten Mikrokontrollers (4) ist, in Verbindung steht und die Fahrzeugbetriebsdaten verschlüsselt in dem dritten Speicher (15) speichert. Tachograph according to Claim 1, characterized in that the encryption unit (11) is in communication with a third memory (15) which is not an integral component of the first microcontroller (4) and stores the vehicle operating data in encrypted form in the third memory (15). Tachograph nach Anspruch 3, dadurch gekennzeichnet, dass der dritte Speicher (15) als verschlüsselter Speicher wahlfreiem Zugriffs (Coded RAM) (16) oder verschlüsselter nichtflüchtiger Speicher (Coded Flash) (17) ausgebildet ist.A tachograph according to claim 3, characterized in that the third memory (15) is formed as a coded random access memory (16) or coded non-volatile memory (17). Tachograph nach Anspruch 1, dadurch gekennzeichnet, dass der erste Mikrokontroller (4) mit einer nicht in den Mikrokontroller integrierten Batterie (18) in Verbindung steht, welche den Inhalt des ersten Speichers (9) und eine in den Mikrokontroller integrierte Real -Time-Clock (12) bei Ausfällen einer externen Spannungsversorgung mit einer Betriebsenergie versorgt.Tachograph according to Claim 1, characterized in that the first microcontroller (4) is connected to a battery (18) which is not integrated in the microcontroller and which contains the contents of the first memory (9) and a real-time clock integrated in the microcontroller (12) supplied with an operating power in case of failure of an external power supply. Tachograph nach Anspruch 5, dadurch gekennzeichnet, dass der erste Mikrokontroller (4) von einem Betriebsenergieversorgungsnetz abschaltbar ist und der erste Mikrokontroller (4) von dem zweiten Mikrokontroller (5) mittels einer Interrupt-Leitung (31) zwischen dem ersten Mikrokontroller (4) und dem zweiten Mikrokontroller (5) einschaltbar ausgebildet ist.Tachograph according to claim 5, characterized in that the first microcontroller (4) of an operating power supply network is switched off and the first microcontroller (4) of the second microcontroller (5) by means of an interrupt line (31) between the first microcontroller (4) and the second microcontroller (5) is switched on. Tachograph nach Anspruch 1, dadurch gekennzeichnet, dass der erste Mikrokontroller (4) mit einem Messwertgeber (2) in einer Signale übertragenden dritten Verbindung (3) steht, der an einem Getriebebauelement eine Drehzahl n misst und dem ersten Mikrokontroller (4) übermittelt.Tachograph according to claim 1, characterized in that the first microcontroller (4) with a transducer (2) in a signals transmitting third compound (3), which measures a gear speed n and transmits to the first microcontroller (4). Tachograph nach Anspruch 1, dadurch gekennzeichnet, dass zwischen dem ersten Mikrokontroller (4) und dem zweiten Mikrokontroller (5) eine Datenübertragungsverbindung vorgesehen ist, mittels derer der erste Mikrokontroller (4) dem zweiten Mikrokontroller (5) Fahrzeugbetriebsdaten übermittelt, die der zweite Mikrokontroller (5) auf der Anzeige (26) zur Darstellung bringt.Tachograph according to Claim 1, characterized in that a data transmission connection is provided between the first microcontroller (4) and the second microcontroller (5), by means of which the first microcontroller (4) transmits vehicle operating data to the second microcontroller (5), which the second microcontroller ( 5) on the display (26) for presentation. Tachograph nach Anspruch 2, dadurch gekennzeichnet, dass der Mikrokontroller, wenn die Sicherheitssensorik (7) ein Überschreiten oder Unterschreiten eines bestimmten Grenzwertes für einen Umgebungsparameter ermittelt, in dem ersten Speicher (9) gespeicherte kryptologische Schlüssel (8) löscht.Tachograph according to claim 2, characterized in that the microcontroller, when the safety sensor (7) detects a falling below or below a certain limit for an environmental parameter, in the first memory (9) stored cryptological key (8) deletes.
EP05104736A 2004-06-11 2005-06-01 Tachograph Not-in-force EP1605410B1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PL05104736T PL1605410T3 (en) 2004-06-11 2005-06-01 Tachograph

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102004028338A DE102004028338A1 (en) 2004-06-11 2004-06-11 tachograph
DE102004028338 2004-06-11

Publications (3)

Publication Number Publication Date
EP1605410A2 true EP1605410A2 (en) 2005-12-14
EP1605410A3 EP1605410A3 (en) 2006-09-13
EP1605410B1 EP1605410B1 (en) 2008-08-20

Family

ID=34982060

Family Applications (1)

Application Number Title Priority Date Filing Date
EP05104736A Not-in-force EP1605410B1 (en) 2004-06-11 2005-06-01 Tachograph

Country Status (6)

Country Link
EP (1) EP1605410B1 (en)
AT (1) ATE405900T1 (en)
DE (2) DE102004028338A1 (en)
DK (1) DK1605410T3 (en)
ES (1) ES2313217T3 (en)
PL (1) PL1605410T3 (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008040686A1 (en) * 2006-10-04 2008-04-10 Continental Automotive Gmbh Tachograph arrangement and method for incorporating an identifier in an adapter for the tachograph arrangement
WO2008090027A1 (en) * 2007-01-23 2008-07-31 Continental Automotive Gmbh Single-chip computer and tachograph
DE102008061710A1 (en) * 2008-12-12 2010-06-17 Continental Automotive Gmbh Method for operating a sensor device and sensor device
RU2595967C2 (en) * 2009-10-30 2016-08-27 Континенталь Аутомотиве Гмбх Method of operating tachograph and tachograph

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102007043262A1 (en) * 2007-09-11 2009-03-12 Continental Automotive Gmbh Data processing device for an embedded system
DE102015214791A1 (en) * 2015-08-03 2017-02-09 Continental Automotive Gmbh Method for operating validation of a sensor unit, sensor unit and tachograph system
DE102018209163A1 (en) * 2018-06-08 2019-12-12 Continental Automotive Gmbh Motion sensor and method for operating a motion sensor

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ES2072189A2 (en) * 1993-03-29 1995-07-01 Interfacom S A System for monitoring automotive vehicle travel measurement, especially applicable in taximeters, tachographs and black boxes.
DE19512266A1 (en) * 1994-09-23 1996-03-28 Rainer Jacob Facility for protection against manipulation e.g. for motor vehicle electronic circuits
EP0724343A2 (en) * 1995-01-28 1996-07-31 VDO Adolf Schindling AG Apparatus for indicating manipulation in transmitted data
EP0965902A2 (en) * 1994-06-28 1999-12-22 National Semiconductor Corporation Secure data processor with cryptography and tamper detection
DE10203433A1 (en) * 2002-01-28 2003-08-07 Kostal Leopold Gmbh & Co Kg Electronic controller has authentication module spatially separate and at distance from actuator(s) and protected against removal and dismantling by mechanical arrangement

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DD154877A3 (en) * 1980-07-23 1982-04-28 Uwe Knauff DIGITAL VEHICLE
DE19912781A1 (en) * 1999-03-12 2000-11-23 Francotyp Postalia Gmbh Method for protecting a security module and arrangement for carrying out the method

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ES2072189A2 (en) * 1993-03-29 1995-07-01 Interfacom S A System for monitoring automotive vehicle travel measurement, especially applicable in taximeters, tachographs and black boxes.
EP0965902A2 (en) * 1994-06-28 1999-12-22 National Semiconductor Corporation Secure data processor with cryptography and tamper detection
DE19512266A1 (en) * 1994-09-23 1996-03-28 Rainer Jacob Facility for protection against manipulation e.g. for motor vehicle electronic circuits
EP0724343A2 (en) * 1995-01-28 1996-07-31 VDO Adolf Schindling AG Apparatus for indicating manipulation in transmitted data
DE10203433A1 (en) * 2002-01-28 2003-08-07 Kostal Leopold Gmbh & Co Kg Electronic controller has authentication module spatially separate and at distance from actuator(s) and protected against removal and dismantling by mechanical arrangement

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008040686A1 (en) * 2006-10-04 2008-04-10 Continental Automotive Gmbh Tachograph arrangement and method for incorporating an identifier in an adapter for the tachograph arrangement
WO2008090027A1 (en) * 2007-01-23 2008-07-31 Continental Automotive Gmbh Single-chip computer and tachograph
RU2458389C2 (en) * 2007-01-23 2012-08-10 Континенталь Аутомотиве Гмбх Single-chip computer and tachograph
DE102008061710A1 (en) * 2008-12-12 2010-06-17 Continental Automotive Gmbh Method for operating a sensor device and sensor device
US8601281B2 (en) 2008-12-12 2013-12-03 Continental Automotive Gmbh Method for operating a sensor apparatus and sensor apparatus
RU2595967C2 (en) * 2009-10-30 2016-08-27 Континенталь Аутомотиве Гмбх Method of operating tachograph and tachograph

Also Published As

Publication number Publication date
DE102004028338A1 (en) 2006-01-12
PL1605410T3 (en) 2009-01-30
EP1605410B1 (en) 2008-08-20
DK1605410T3 (en) 2009-01-05
ATE405900T1 (en) 2008-09-15
DE502005005075D1 (en) 2008-10-02
ES2313217T3 (en) 2009-03-01
EP1605410A3 (en) 2006-09-13

Similar Documents

Publication Publication Date Title
EP1605410A2 (en) Tachograph
DE102011117214B4 (en) A method for detecting an unauthorized opening of a signature device, signature device and computer system with the same
DE102006045195B3 (en) Code i.e. intellectual code, input unit for electronic lock cylinder, has motor, where intellectual code has code units that are represented in form of numbers and/or characters and/or symbols in outer turning knob
EP1928710A1 (en) Remote controllable locking device for a vehicle
DE3225754A1 (en) METHOD FOR THE LOCKING EFFECTIVE INTERACTION OF A KEY-LIKE PART WITH A LOCK-LIKE PART
DE19610161A1 (en) Data transmission device in a vehicle, consisting of a pulse generator and a control device, and pulse generator for the control device
DE212010000037U1 (en) MECHATRONIC LOCKING DEVICE
WO1998053434A2 (en) Method for initializing a vehicle steering lock
DE102018210318B4 (en) Method for securing vehicle components and corresponding vehicle component
DE102007058481A1 (en) Safety system for connecting closing system locking/unlocking device to keyless access of lockable area of motor vehicle, has container element with display displaying of status of sensor transmitted over communication connection
EP2235598B1 (en) Field device and method of operation thereof
DE4317119C2 (en) Anti-theft device as immobilization device on a motor vehicle
EP1760623A2 (en) Safety equipment for electronic equipment
EP0616429A1 (en) Method and circuit for generating a pseudo-random sequence and its use
DE3844377A1 (en) IGNITION SYSTEM FOR MOTOR VEHICLES
WO2007065723A1 (en) Electronic key with emergency key
EP2376871B1 (en) Method for operating a sensor apparatus and sensor apparatus
EP1404934B1 (en) Elektronisch überprüfte hochsicherheitskodiereinrichtung und-dekodiereinrichtung
EP0724343B1 (en) Method for indicating manipulation in data that is to be transmitted
EP1222621B1 (en) Integrated circuit and circuit arrangement for supplying an integrated circuit with electricity
WO2009021599A1 (en) Electromechanical parking brake for a motor vehicle
DE10152349B4 (en) safety device
EP2715681B1 (en) Method for generating a currently valid one-time release code for an electronic lock
EP2195789A1 (en) Velocity detection apparatus
DE20021902U1 (en) Building management system

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL BA HR LV MK YU

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL BA HR LV MK YU

17P Request for examination filed

Effective date: 20061010

17Q First examination report despatched

Effective date: 20061117

17Q First examination report despatched

Effective date: 20061117

AKX Designation fees paid

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: CONTINENTAL AUTOMOTIVE GMBH

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REF Corresponds to:

Ref document number: 502005005075

Country of ref document: DE

Date of ref document: 20081002

Kind code of ref document: P

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

REG Reference to a national code

Ref country code: DK

Ref legal event code: T3

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20081220

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

REG Reference to a national code

Ref country code: PL

Ref legal event code: T3

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2313217

Country of ref document: ES

Kind code of ref document: T3

REG Reference to a national code

Ref country code: IE

Ref legal event code: FD4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20081120

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20090120

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20090525

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

BERE Be: lapsed

Owner name: CONTINENTAL AUTOMOTIVE G.M.B.H.

Effective date: 20090630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CZ

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090601

Ref country code: MC

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090630

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: DK

Ref legal event code: EBP

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090630

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090630

REG Reference to a national code

Ref country code: PL

Ref legal event code: LAPE

REG Reference to a national code

Ref country code: ES

Ref legal event code: FD2A

Effective date: 20090602

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090601

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20081121

Ref country code: ES

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090602

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090601

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20090221

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080820

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20120613

Year of fee payment: 8

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: SE

Payment date: 20130619

Year of fee payment: 9

Ref country code: GB

Payment date: 20130619

Year of fee payment: 9

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20130624

Year of fee payment: 9

Ref country code: FR

Payment date: 20130703

Year of fee payment: 9

Ref country code: NL

Payment date: 20130619

Year of fee payment: 9

REG Reference to a national code

Ref country code: NL

Ref legal event code: V1

Effective date: 20150101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140602

REG Reference to a national code

Ref country code: SE

Ref legal event code: EUG

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 405900

Country of ref document: AT

Kind code of ref document: T

Effective date: 20140601

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20140601

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

Effective date: 20150227

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20150101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140601

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140630

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140601

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140601

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20180630

Year of fee payment: 14

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: TR

Payment date: 20180531

Year of fee payment: 14

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 502005005075

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190601