Robert Boschgmbh

Christian Zimmermann

Karl-Heinz Kugler

Sven Trieflinger

Stefan Gehrer

Paulius Duplys

Walter Gollin

Karlheinz Riedel

Axel Aue

Andreas Heyl

Richard Schleupen

Markus Schweizer

Betül Durak

Arnd-Matthias Langner

Jorge Guajardo Merchan

Frank Hofmann

Ulrich Gottwick

Erich Junginger

Christopher Huth

Rene Schenk

Johann Riegel

Klaus Sambale

Jan Zibuschka

Manfred Kirschner

Gebhard Wuerth

Helmut Wandel

Bernd Hilgenberg

Ralph Retter

Beate Leibbrand

Fredrik Kamphuis

Arne Nordmann

Martin Ring

Tobias Gehrmann

Max Camillo Eisele

Soheil Gherekhloo

Hans Koehnle

Dietmar Blessing

Oliver Lah

Yoichi Arima

Ernst Kaller

Fatma Betül Durak

Sebastian Schuster

Wilhelm Haag

Frank Molwitz

Norbert Bissmeyer

Juergen Spachmann

Disclosed are systems and methods for a computerized framework that provides an improved, secure computational environment between trusted and untrusted devices (e.g., a Trusted Execution Environment (TEE) and graphics processing unit (GPU), respectively) for executing and offloading Convolutional Neural Network (CNN) computations and operations. The disclosed framework can operate to perform such secure offloading and processing not only during inference computations of the CNN, but also during training of the CNN. The disclosed framework operates to enable training and execution of CNN models, whereby the data used for such operations are held securely while they are in use, in transit (e.g., between the TEE and GPU) and while in storage.

Computerized systems and methods for secure execution and offloading of computations between trusted and untrusted devices

Methods and systems of leveraging multiple data-collection entities to protect personal data. Image data is captured via an image sensor of a vehicle. A classifier can partition the captured image data into personal data and non-personal data, and can assign a confidence score to the personal data. If the confidence score is below a threshold, the vehicle can broadcast a wireless signal to other data-collection entities such as other vehicles or road-side unit, wherein the wireless signal includes a request for the other data-collection entities to inform the vehicle if those data-collection entities have detected personal data at a time corresponding to when the image sensor of the vehicle captured the image data. If the other data-collection entities indeed detected such personal data at the time, the vehicle can perform various actions such as deleting the images, or the portions that include personal data.

Method and system for detection and protection of personal data in autonomous driving

A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Method for the provision of a function by a group of computing units

Methods and systems for securely managing personal data associated with image processing include an image sensor configured to capture an image, a local computer system local to the image sensor, and a backend computer system remote from the image sensor. The local computer system has a processor with a trusted execution environment (TEE) that detects anomalies in images from the image sensor, extracts personal data from the image, and encrypts the personal data. The local computer system then sends the extracted, encrypted personal data to the backend computer system, where a backend TEE decrypts the extracted, encrypted personal data, and performs data processing by comparing the decrypted personal data to other personal data that is stored in a backend database in the backend computer system.

Methods and systems for managing personal data associated with image processing

A system and method are disclosed for processing data subject rights requests. The system and method advantageously enable data controllers to train machine learning models on unaltered data having PII, while maintaining the privacy of the unaltered data and enabling compliance with data subject rights requests with respect to the data. The system and method incorporate a biometric database that stores biometric data extracted from the unaltered data having PII. In order to identify data relating to a data subject rights request, biometric data is received from the data subject and is matched against the biometric data stored in the biometric database. Based on the matched biometric data, the original unaltered source data having PII can be identified for the purpose of exercising one or more data subject rights, such as erasure, access, and objection to processing.

System and method for processing a data subject rights request using biometric data matching

A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.

Method for providing a function via a network of processing units

A method for communicating data requests to one or more data sources. The method includes receiving a data request, with which data of one or more data types are requested, from an application, and checking the availability of one or more data sources that are able to provide the one or more requested data types. The method further comprises: if at least one of the one or more data sources is available, sending a request to the available data source for the requested associated data type that the data source can provide; and, if no data source is available for at least one of the requested data types, sending a request for this data type to a placeholder module.

Method for communicating data requests to one or more data sources and for processing requested data from one or more data sources in an application

A method for operating a first vehicle-side terminal is provided, wherein the first vehicle-side terminal determines at least one symmetric group key that is assigned to the group of terminals, encrypts the at least one symmetric group key with a public asymmetric individual key that is assigned to a second vehicle-side terminal or with a symmetric pair key that is assigned to the second vehicle-side terminal, transmits the encrypted symmetric group key in the direction of the second vehicle-side terminal, receives an encrypted message from the second vehicle-side terminal, and decrypts the encrypted message depending on the symmetric group key.

First vehicle-side terminal, method for operating the first terminal, second vehicle-side terminal and method for operating the second vehicle-side terminal

A system and method for a client computer for the local composition of a data page having personal user data for services accessed by the user and provided on a number of servers. The method includes: setting up a central access server from among the servers; setting up a query for the composition of the data page, for a transmission from the client computer to the central access server; receiving a processing element, which includes a visual element and access addresses to the servers that are relevant for the query, the processing element including control commands processed by the client computer, and queries of the client computer to the access addresses included in the processing element being coordinated so that the personal user data on the servers to be aggregated for the composition of the data page are delivered directly to the client computer for the local composition.

Transparency mechanism for the local composition of personal user data stored in a distributed fashion

A method for operating an automated vehicle convoy includes periodically wirelessly transmitting messages from preceding participants of the automated vehicle convoy to respective following participants of the automated vehicle convoy, proceeding from the leading participant of the automated vehicle convoy. The messages include at least one piece of, in particular temporal, information from which a minimum distance between each following participant and the respective preceding participant is ascertained. The following participants of the automated vehicle convoy are guided corresponding to the ascertained minimum distance.

Method for operating an automated vehicle convoy

For achieving a highest possible measuring accuracy of a circuit for measuring the internal resistance of an exhaust-gas sensor, a method and a circuit for measuring the internal resistance R() of an electrochemical cell () are provided for determining the temperature of an exhaust-gas sensor, especially of a motor vehicle. The circuit is provided with the objective to improve the control to a constant temperature to therefore also improve the performance of the exhaust-gas sensor. A measurement current I_Mess () is applied to the internal resistance R() of the electrochemical cell () and a resulting first voltage is detected. A switchover to a reference resistor Rtakes place from time to time or at regular time intervals. With a switchover to the reference resistor R, the resulting second voltage is stored and thereafter is applied as a reference value for the measurement of the internal resistance R(). The switchover () to the reference resistor Rtakes place, for example, via force/sense lines.

Determining the temperature of an exhaust gas sensor by means of calibrated internal resistance measurement

A system for supplying power to a volatile semiconductor memory having a memory array, with the semiconductor memory being provided with a standby voltage that is present at a second connection of the semiconductor memory. To implement the power supply system as simply and with as few components as possible, the semiconductor memory is provided with a stabilization circuit for stabilizing the standby voltage that has a low impedance when the input voltage is elevated and a high impedance when the input voltage is too low to supply the semiconductor memory.

Arrangement for voltage supply to a volatile semiconductor memory

A method and device for driving a pump of a brake system, in which a pump motor achieves full drive for a particular time following a braking request from the brake system. During the subsequent clocked driving action, a drive signal is subjected to a pulse width modulation based on a direct comparison between a motor voltage and a voltage threshold value. Due to a subsequent comparison between the motor voltage and a safety threshold, and the resulting full drive for the particular time, an increased load on the pump causes the pump to produce the necessary delivery capacity. In addition, a selectable maximum off-time of the pump motor guarantees a minimum pump on-time per drive cycle. The pump can be made to achieve full drive prematurely as a function of certain conditions which can be subjected to a preventive check, thereby avoiding an excessively high load. It is also possible to coordinate the way in which different control strategies access the pump.

Method and device for controlling a pump of a brake system

A method and a device having a processor module for controlling operating sequences, in particular in an engine control unit in a motor vehicle, peripheral elements being selected by a processor module having a predetermined number of select interfaces by select signal output over these select interfaces, and instructions being transmitted to the peripheral elements over at least one information interface of the processor module. Selection identifiers are assigned to the instructions and transmitted together with them. Thus, a selection of peripheral elements is made by a select signal and a selection identifier.

Method and device for controlling operating sequences

A method for estimating an admission pressure prevailing between a main brake cylinder and an intake valve of a wheel brake cylinder of a motor vehicle brake system, with the admission pressure being estimated, taking into account a run-on voltage of a clocked-mode motor of a pump for recirculating brake fluid from an accumulator, located at the output end of the wheel brake cylinder, to the main brake cylinder of the brake system, and also taking into account an accumulator pressure determined in the accumulator.

Method and device for estimating an admission pressure in a motor vehicle brake system

Growing community of inventors

Stuttgart, Germany

Christian Zimmermann