Ford Global Technolgoies, LLC

Tenneco Automotive Operating Company Inc.

Bradley Warren Smith

Xin Ye

Venkata Kishore Kajuluri

Brett Herwat

Jason C Johnson

Eric L Reed

Jonathan Diedrich

Lisa Therese Boran

John Moore

Jacob David Nelson

Boyd Boehlke

An exhaust assembly includes a first tailpipe having an exit end and a curved portion along at least a portion of a length of the first tailpipe. The exhaust assembly further includes a baffle surrounding the first tailpipe at the exit end and defining a plurality of perforations therethrough. The exhaust assembly further includes a pair of shields. Each shield is attached to and at least partially surrounds each of the baffle and the first tailpipe. Each shield extends from a first end proximal to the exit end of the first tailpipe to a second end distal to the exit end of the first tailpipe. Each shield engages the baffle at the first end and engages the first tailpipe at least at or proximal to the second end. The pair of shields is adapted to allow fluid flow to or from the plurality of perforations of the baffle.

Exhaust assembly

An onboard communication network of a vehicle is monitored to detect a plurality of available messages that include respective cipher-based message authentication codes (CMAC) and that were identified as eligible messages based on having an information entropy greater than a specified threshold. A first message is selected from the plurality of available messages. The CMAC of the selected message is input into a random number generator that outputs a random number seeded by the CMAC of the selected message. Then the random number is provided.

System and method for a vehicle network

A vehicle communication network is monitored to detect a plurality of electronic control units (ECUs). Upon identifying a new ECU in the plurality of ECUs, a highest ECU trip counter is determined from the plurality of ECUs. A global trip counter stored in the memory is updated based on the highest ECU trip counter. The updated trip global trip counter is greater than the highest ECU trip counter. Then a replacement synchronization message is provided to the plurality of ECUs on the vehicle communication network. The replacement synchronization message includes the updated global trip counter.

Vehicle electronic control unit authentication

A system for a vehicle includes a computer, a first electronic control module, and a wired vehicle communications network coupling the computer and the first electronic control module. The computer is programmed to transmit authentication keys to the first electronic control module and a plurality of second electronic control modules via the wired vehicle communications network, encrypt a table of the authentication keys using a first key, store the encrypted table, transmit the encrypted table to the first electronic control module via the wired vehicle communications network, and transmit the encrypted table and the first key to a remote server spaced from the wired vehicle communications network.

Transmission of authentication keys

A muffler for use with an internal combustion engine is provided. The muffler includes a first tube configured to receive a first exhaust stream. The first tube includes a first inlet portion, a first outlet portion spaced apart from the first inlet portion, and a first intermediate portion extending between the first inlet portion and the first outlet portion. The muffler also includes a second tube configured to receive a second exhaust stream. The second tube includes a second inlet portion, a second outlet portion spaced apart from the second inlet portion, and a second intermediate portion extending between the second inlet portion and the second outlet portion. The first intermediate portion and the second intermediate portion cross each other, are at least partially stacked on each other, and are in fluid communication with each other.

Exhaust system and muffler

A system includes a control module and a local server. The server is programmed to transmit a command to perform an operation to a plurality of vehicles including a vehicle including the control module. The command including a digital signature that is common across the vehicles. The control module is programmed to receive a temporary value; receive the command; decrypt the digital signature in the command with the temporary value; upon verifying the decrypted digital signature, perform the operation; and upon a metric incrementing to a threshold value, prevent decryption of the digital signature with the temporary value.

Securely transmitting commands to vehicle during assembly

Systems and methods described herein provide for assigning classifications to signals and corresponding messages for prioritization and transmission across a vehicle CAN bus. The assigned classifications are used to select authentication keys specific to each classification of message. Nodes of the CAN bus can include different sets of keys based on the classifications of messages handled at the nodes. Keys are distributed and localized to reduce any potential impact on critical functions of the vehicle system that may result from compromise of an authentication key.

Assigning categories for messages and symmetric key per category to localize the impact in case of key compromise

Techniques for using a trip flag to detect desynchronization of trip counter values in a vehicle system. Techniques include a first electronic control unit (ECU) receiving a synchronization message including a trip counter and receiving a message from a second ECU including a trip flag. The trip flag includes a single bit of data generated by the second ECU. The first ECU compares the trip flag to a last bit of the trip counter stored at the first electronic control unit and processes the message in response to the trip flag matching the trip counter. The first ECU compares the trip counter to a previous trip counter based on the trip flag differing from the trip counter. The first ECU processes the message using the previous trip counter or increments the trip counter to process the message based on the comparison with the previous trip counter.

Detecting and resolving desynchronization of trip counter values in authenticated messages

A computer includes a processor and a memory storing instructions executable by the processor to, upon receiving an authorization message, transmit a plurality of new authentication keys to a respective plurality of control modules, the memory including an expiration time for the authorization message; update a listing of the control modules with respective statuses of the transmissions of the respective new authentication keys to the respective control modules, wherein each status is one of successful or unsuccessful; upon at least one status being unsuccessful, prevent the authorization message from expiring at the expiration time; after preventing the authorization message from expiring, retransmit the respective new authentication keys to each control module for which the respective status is unsuccessful; and then expire the authorization message.

A computing device can be programmed to, upon determining that a location of a vehicle is within a set of boundaries associated with a wireless network and that a user device is authenticated to the network, authorize the user device to control the vehicle. The computing device can be further programmed to, upon determining that the vehicle is not within the boundaries, authorize the user device to control the vehicle based on transmitting an authentication credential to a server and receiving an authorization certificate.

Growing community of inventors

Ann Arbor, MI, United States of America

Bradley Warren Smith