Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L12/00—Data switching networks
  • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
  • H04L12/40—Bus networks
  • H04L12/403—Bus networks with centralised control, e.g. polling
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/602—Providing cryptographic facilities or services
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
  • H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
  • H04L9/3242—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L12/00—Data switching networks
  • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
  • H04L12/40—Bus networks
  • H04L2012/40267—Bus for use in transportation systems
  • H04L2012/40273—Bus for use in transportation systems the transportation system being a vehicle
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
  • H04L2209/84—Vehicles

Definitions

• the disclosure relates to a computing device, in particular for a
• Control unit of a motor vehicle the computing device being designed to receive messages from at least one external unit.
• the disclosure further relates to a method for operating such a computing device.
• Preferred embodiments relate to a computing device, in particular for a control unit of a motor vehicle, the
• the computing device is designed to receive messages from at least one external unit, for example further control devices, the computing device being designed to store the received messages at least temporarily and a plurality of the received ones
• Computing device is designed to receive a result of the check from the cryptography module and to process at least one of the plurality of messages received depending on the result of the check.
• Computing device is designed to wait for a predeterminable minimum number of received messages before the majority of the received messages are transmitted to the cryptography module.
• the computing device is designed to wait for a predefinable period of time before the majority of the messages received, in particular during the predeterminable period of time, is transmitted to the cryptography module.
• the at least temporarily storing received messages comprises at least temporarily storing the received messages in a storage device which both the computing device and the cryptography module can access, the transmission comprising the following steps:
• the first control information comprises at least one pointer and / or a number of the messages received.
• the computing device is designed to transfer second control information to the cryptography module, the second control information characterizing a memory area or an address in the memory device, into which memory area or to which address the cryptography module should write or the result of the check.
• Computing device is designed to carry out no processing of a received message if the received message has not already been checked by the cryptography module. This ensures that only messages checked by the cryptography module are processed.
• the cryptography module is integrated into the computing device and / or that the cryptography module is arranged on the same semiconductor substrate as the computing device, which results in a particularly small configuration.
• the computing device generally receives or ascertains data or messages from other sources (for example, data or messages itself formed by the computing device) and optionally under
• Application of a cryptographic process can be edited or edited (in particular by the cryptographic module), for example provided or provided with a cryptographic signature.
• the computing device can transmit the messages (obtained from other sources and / or self-generated) to the cryptography module, preferably in turn a plurality of the messages mentioned, the cryptography module in further preferred embodiments these messages (e.g. instead of the above
• the cryptographic signature preferably all of the above-mentioned majority of the messages are initially provided with the signature, and in further preferred embodiments the messages provided with the signature are then transmitted to the computing device, which in further preferred embodiments then sends the signed messages to, for example further computing devices or control devices transmitted.
• Further preferred embodiments relate to a method for operating a computing device, in particular for a control device of a motor vehicle, the computing device receiving messages from at least one external unit, the computing device storing the received messages at least temporarily and transmitting a plurality of the received messages to a cryptography module, which is designed to check the transmitted messages. Further preferred embodiments relate to a cryptography module for a computing device, in particular for a computing device according to the embodiments, wherein the cryptography module is designed to receive a plurality of messages from the computing device and to carry out a check of the received messages.
• CMAC Cipher-based Message Authentication Code
• Cryptography module is designed to send a result of the check to the computing device, the sending in particular the writing of result information characterizing the result in a
• predeterminable memory area of a memory device that can be accessed by both the computing device and the cryptography module.
• Further preferred embodiments relate to the use of the computing device according to the embodiments and / or the method according to the embodiments and / or the cryptography module according to the embodiments for processing messages, in particular messages transmitted via a bus system of a vehicle, in particular a motor vehicle.
• FIG. 1 schematically shows a simplified block diagram of a computing device according to preferred embodiments
• FIG. 2 schematically shows a simplified flow diagram of a method according to further preferred embodiments
• FIG. 3 schematically shows a simplified flow diagram of a method according to further preferred embodiments
• FIG. 4 schematically shows a simplified flow diagram of a method according to further preferred embodiments
• FIG. 6 schematically shows a simplified block diagram of a computing device according to further preferred embodiments
• FIG. 7 schematically shows a simplified block diagram of a computing device according to further preferred embodiments.
• FIG. 8 schematically shows a simplified block diagram of a semiconductor substrate according to further preferred embodiments.
• FIG. 9 schematically shows a simplified block diagram of a control device according to further preferred embodiments.
• Figure 1 shows schematically a simplified block diagram of a
• Computing device 100 according to preferred embodiments.
• Computing device 100 is designed to receive messages N (or generally any data) from at least one external unit 200, for example a control unit, the received messages N at least temporarily stored, and to transmit a plurality N 'of the received messages N to a cryptography module 400 which is designed to carry out a check of the transmitted messages N'.
• the multiple transmitted messages N ' can be checked efficiently, and the plurality N' of the messages can be transmitted to the cryptography module 400 by the computing device 100 in a particularly resource-saving manner, for example as a coherent block of data, for example in contrast to one repeated transmission of individual messages.
• FIG. 2 schematically shows a simplified flow diagram of a method according to further preferred embodiments.
• device 100 receives messages N (or generally any data) from external unit 200 (or from several different units, not shown).
• the computing device 100 stores the received messages N at least temporarily.
• step 304 the
• Computing device 100 the plurality N 'of the received messages to the cryptography module 400 for checking.
• Computing device 100 is designed to produce a result E (FIG. 1) of the
• the computing device 100 can carry out further tasks after the transmission from step 304 and in particular before receiving the result E according to step 306, as a result of which the period of time which the cryptography module 400 may need to check the previously determined messages to be checked is otherwise can be used by the computing device 100.
• the computing device 100 can use the
• FIG. 3 schematically shows a simplified flow diagram of a method according to further preferred embodiments, which describes the processing of messages by the cryptography module 400.
• the cryptography module 400 receives the plurality N 'of messages which have been transmitted by the computing device 100 to the cryptography module 400 in step 304.
• the cryptography module 400 carries out a check of the messages received by the computing device 100. In further preferred embodiments, the check is carried out after step 502 of FIG. 3 using a key-based
• CMAC Message authentication codes
• a CMAC reference value which the cryptography module 400 can access, can be provided for a relevant message to be checked.
• the cryptography module 400 can advantageously use a CMAC method to determine a current CMAC value depending on the
• the cryptography module 400 can conclude that the checked message is genuine and provide a corresponding result E of the check. If the compared values do not match, it can be concluded that the currently received and checked message is not correct, for example has been manipulated (and / or unintentionally falsified).
• the cryptography module 400 are provided by the computing device 100.
• the computing device 100 can transmit the reference values or CMAC reference values to the cryptography module 400 together with the plurality N ′ of the messages to be checked.
• the following data format can be used, for example.
• An index value is assigned to a message to be checked ("plain text"), which enables the message to be clearly identified within the plurality N 'of the messages to be checked.
• the message to be checked is a (CMAC-) Assigned reference value.
• key information (“Key ID”) is assigned to the message to be checked, which characterizes a specific cryptographic key that is associated with the one to be checked
• the data format described can accordingly contain at least one of the following elements: a) index value, b) content of the message (“plain text”), c) (CMAC) reference value, d)
• step 304 (FIG. 2) of the transmission, in addition to the message to be checked in accordance with further preferred embodiments, one or more of the above-mentioned elements a), c), d) of the data format described as an example can also be sent to the cryptography module 400 are transmitted, again advantageously the said plurality M 'of messages or a corresponding plurality of the aforementioned data records, which corresponds to the said plurality M' of messages, are transmitted to the cryptography module 400.
• step 504 the cryptography module 400 sends the result E (FIG. 1) of the check 502 (FIG. 3) to the computing device 100, with the computing device 100 also depending on the result E as described above with reference to FIG continue with optional steps 306 and / or 308.
• Computing device 100 to the cryptography module 400 has further advantages in that the cryptography module 400 can also check several transmitted messages at once, in particular without continuing with the
• compare step 502 according to FIG. 3, and the result E is only communicated to the computing device 100 after a complete check of the said plurality N '.
• compare the simplified flow diagram from FIG. 4 it is provided that the computing device 100 is designed to wait for a predeterminable minimum number of received messages, compare step 310 before the plurality N ′ (FIG. 1) of the received messages Messages is transmitted to the cryptography module 400, compare step 312. This advantageously allows multiple received messages
• Transmission process to the cryptography module 400 are transmitted.
• the computing device 100 is designed to wait for a predefinable period of time, compare step 320 before the plurality N ′, particularly during the predefinable one
• the length of time that received messages are transmitted to the cryptography module 400, compare step 322.
• This also advantageously allows a plurality of messages N arriving at the computing device 100 from the at least one further unit 200 to be bundled before they are sent to the cryptography module 400 in the form of the plurality N 'for the purpose transferred to the review.
• the at least temporarily storing received messages by the computing device 100 includes at least temporarily storing 3020 the received messages in a storage device to which both the computing device 100 and the cryptography module are based 400, the transmission 3022 comprising the following steps: transfer of first control information S1 (FIG. 1) which characterize a memory area of the memory device in which the received messages are stored.
• the first control information S1 can have at least one pointer to one
• one or more of the elements associated with the respective message can also be Index value, c) (CMAC) reference value, d) key information (“key ID”) are transmitted efficiently to the cryptography module 400.
• FIG. 6 schematically shows a simplified block diagram according to further preferred embodiments.
• the computing device 100 from FIG. 1 can have the configuration 100a according to FIG. 6.
• the configuration 100a has at least one computing unit 102, and at least one memory device 104 assigned to the computing unit 102 for at least temporarily storing a computer program PRG, the
• Computer program PRG in particular for controlling an operation of the computing device 100 or configuration 100a, in particular for executing the method according to the embodiments.
• the computing unit 102 has at least one of the following elements: a microprocessor, a microcontroller, a digital signal processor (DSP), a programmable logic module (e.g. FPGA, field programmable gate array), an ASIC
• the memory device 104 has at least one of the following elements: a volatile memory 104a, in particular working memory (RAM), a non-volatile memory 104b, in particular flash EEPROM.
• the computer program PRG is preferably stored in the non-volatile memory 104b.
• the storage device 104 ′ already described above is also provided, to which both the
• Computing device 100, 100a and cryptography module 400 can access. As already described, in further preferred embodiments, those received by the computing device 100, 100a
• Messages N are stored at least temporarily in the storage device 104 '.
• at least one receive buffer for messages to be received can be defined for this.
• the storage device 104 ' can also form part of the storage device 104 or be integrated therein. In this way, messages N from the
• Computing device 100 can be transmitted to the cryptography module 400.
• Transferring the first control information S1 from the computing device 100 to the cryptography module 400 may be sufficient so that the cryptography module 400 can read or load messages to be checked from the storage device 104 ′.
• the first control information S1 has at least one pointer (for example to a memory area comprising the messages N to be checked)
• Storage device 104 and / or a number of messages received.
• Computing device 100, 100a is designed to transfer second control information S2 (FIG. 1) to the cryptography module 400, the second control information S2 being a memory area or an address in the
• Memory device 104 characterize in which memory area or to which address the cryptography module 400 should write or the result E (FIG. 1) of the check 502 (FIG. 3) should write.
• Computing device 100, 100a is designed not to process a received message N if the received message has not already been checked by the cryptography module 400. This ensures that only messages checked by the cryptography module 400 are processed.
• Cryptography module 400, 400 ' is designed to produce a result E of
• Memory area of the memory device 104 ′′ (FIG. 6), to which both the computing device 100, 100a and the cryptography module 400, 400 ′′ can access.
• different result values of the result E which are assigned to the different messages of the plurality M ′, can be supplemented, for example, by the index value already described above, in order to enable the respective result value to be uniquely assigned to a corresponding checked message.
• the computing device 100 is part of a control unit 700, in particular for a motor vehicle, wherein the cryptography module 400 can optionally also form part of the control unit 700.
• the computing device 100 generally receives or ascertains data or messages from other sources (for example also formed by the computing device 100) and this optionally using a processed cryptographic process, for example provided with a cryptographic signature.
• the computing device 100 in further preferred embodiments can be compared to the one mentioned above
• the process described with reference to FIG. 2 transmits the said (e.g. self-generated) messages to the cryptography module 400, preferably again a plurality of the said messages, the
• Cryptography module 400 these messages instead of the above
• the cryptographic signature preferably first provides all of the above-mentioned majority of the messages with the signature, and then transmits the messages provided with the signature to the computing device 100, which in further preferred embodiments can then transmit the signed messages to further computing devices or control devices, for example. In further preferred embodiments can also for this
• Devices 100, 400 can access.
• Storage device 104 Exchanges, these storage areas
• the messages to be provided with the signature for example include the messages to be provided with the signature and / or the messages to be provided with the signature.
• the principle according to the embodiments enables a particularly efficient processing of messages N by the computing device 100, 100a. This applies both to the processing of messages which are received in the computing device 100, 100a by the external unit 200, and also
• Messages through the cryptographic module 400 result in a saving of in particular computing resources of the computing device 100, 100a and avoids one that arises in conventional systems
• Embodiments minimize transmission processes from the computing device 100, 100a to the cryptography module 400, in particular with regard to security-critical information, as a result of which security is further increased.
• a value of the plurality N 'of messages can be configured or parameterized, as can the predeterminable minimum number of received messages that are to be waited for (compare step 310 from FIG. 4) and / or the predefinable period of time according to step 320 Figure 5A.
• the principle according to the embodiments can be efficiently adapted to different target systems, such as control units, in particular taking into account the communication load of the respective control units (number of messages to be processed per time) and / or the computing resources and / or storage resources.
• the principle according to the embodiments offers increased flexibility with regard to the configurability of processing of messages N by the computing device 100, 100a.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Signal Processing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Theoretical Computer Science (AREA)
• Computer Hardware Design (AREA)
• General Engineering & Computer Science (AREA)
• Power Engineering (AREA)
• Software Systems (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Health & Medical Sciences (AREA)
• General Health & Medical Sciences (AREA)
• Bioethics (AREA)
• Computing Systems (AREA)
• Storage Device Security (AREA)
• Small-Scale Networks (AREA)

Priority Applications (4)

Applications Claiming Priority (2)

Publications (1)

Family

ID=68699463

Family Applications (1)

Country Status (6)

Families Citing this family (2)

Citations (3)

Family Cites Families (24)

• 2018
  • 2018-12-17 DE DE102018221954.0A patent/DE102018221954A1/de active Pending
• 2019
  • 2019-11-27 EP EP19809829.5A patent/EP3900275B1/de active Active
  • 2019-11-27 JP JP2021534678A patent/JP7372975B2/ja active Active
  • 2019-11-27 CN CN201980083258.3A patent/CN113169925A/zh active Pending
  • 2019-11-27 US US17/312,600 patent/US11960611B2/en active Active
  • 2019-11-27 WO PCT/EP2019/082704 patent/WO2020126365A1/de not_active Ceased

Patent Citations (3)

Also Published As

Similar Documents

Legal Events