Continental Automotive Gmbh

Robert Boschgmbh

Continental Automotive Technologies Gmbh

Continental Automovie Gmbh

Continental Autonomous Mobility Germany Gmbh

Cariad Se

Aumovio Autonomous Mobility Germany Gmbh

Helge Zinner

Josef Nöbauer

Christoph Arndt

Julian Brand

Norbert Balbierer

Olivier Frament

Daniel Hopf

Bruno Pöller

Stefan Brunner

The method includes the following steps: a) a head node determining the number of active nodes; b) the head node classifying the identified nodes into two or more classifications of nodes in order to prioritize the Ethernet network communication; c) the head node receiving reservation requests from at least some of the multiplicity of nodes; d) allocating time slots, in response to reservation requests, to one or more nodes in the upcoming communication window, the allocations being based on a priority of the nodes and the priority being allocated to the nodes in accordance with their classification. After the number of active nodes has been determined, the bus cycle length is calculated and the number of sleeping or inactive or defective nodes is determined, and a beacon bus cycle is determined in terms of how much the bus cycle length is able to be shortened.

Method for optimizing the transfer data rate in a sensor network in partial network operation in an ethernet network

A method for securing the time synchronization of an Ethernet on-board network of a motor vehicle, by: determining a delay time of a first signal on a first connecting path between a first control unit of the network and a second control unit of the network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The determination of the delay time of a first signal, the determination of the maximum speed of the first connecting path, and the determination of the type of a transmission medium of the first connecting path result in an entropy source being formed that is used to ascertain at least one dynamic key for the connecting path to encrypt a time synchronization message for the connecting path.

Method for securing the time synchronization of an ethernet on-board network

In a system of control devices networked with one another via a first network or multiple first sub-networks, and of which at least one is a server-based control device that combines multiple functional units, a grandmaster clock is defined by ascertaining the best clock of the entire network. If the best clock is located in a server-based control device, the distances are ascertained between selected functional units that are suitable as a source of the grandmaster clock and selected active network interfaces that connect the server-based control device to the first network or multiple first sub-networks, and the average distance to all selected network interfaces for each of the selected functional units is determined. That selected functional unit that has the smallest average distance to all selected network interfaces is defined as grandmaster clock for the first network or the first sub-networks.

Method for optimizing the time synchronization between network devices connected via a communications network

A method for securing time synchronization in a server Electronic Control Unit (ECU), including: initializing time synchronization of the components; storing a unique clock identification of a grandmaster clock; identifying a shadow controller; transmitting synchronization messages; querying the sending time with the shadow controller; inserting the time in the follow-up message via the controller that forms the grandmaster clock, and retransmitting the time; sending additional messages relating to time synchronization via selected network devices that do not provide the previously determined grandmaster clock. The time information sent in the additional messages relating to time synchronization and the clock parameters relevant for determining the best clock by Best Master Clock Algorithm (BMCA) and the domain number match those of the previously determined grandmaster clock, or are comparable with them. The additional messages relating to time synchronization contain a unique clock identification corresponding to the identification of the respective selected network device.

Method for securing the time synchronization in a server ECU

A method for rapidly flashing sensor nodes via an Ethernet network having a head node and a plurality of associated nodes. The method includes: determining the number of active nodes by a head node; classifying the identified nodes into multiple classifications to prioritize the Ethernet network communication by the head node; receiving reservation requests from at least some of the plurality of nodes by the head node; assigning to one or more nodes in the upcoming communication window time slots in response to reservation requests based on a node priority and the priority assigned to the nodes in accordance with their classification. A necessary download data rate is then determined and, a current bus utilization is ascertained by calculating the time difference of a final beacon and the number of nodes, and the bus cycle of the Ethernet network is optimized in terms of the necessary download data rate.

Method for rapidly flashing sensor nodes via an ethernet network

The validity of sensor data of an Ethernet onboard network in a motor vehicle is checked by: determining a delay time of a first signal on a first connecting path between a first control unit of the Ethernet onboard network and a second control unit of the Ethernet onboard network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The following steps are also carried out: identifying at least a first control unit of the Ethernet onboard network, synchronizing at least a first control unit of the Ethernet onboard network, ascertaining the synchronization interval, ascertaining a drift of a timer of the first control unit, ascertaining a timestamp of the first control unit, reading a timestamp of the first control unit.

Method for verifying the validity of sensor data of an ethernet onboard network

A network interface has an input port, which is designed to accept messages from a first device or first network, and an output port, which is designed to forward the messages to a second device or second network. A memory is provided for a timetable. The network interface is designed to forward messages arriving at the input port during open times defined by the timetable to the output port and to discard messages arriving at the input port during closed times defined by the timetable. A configuration unit is designed to accept and store in the memory a timetable defined by a monitoring unit as a shared secret for the network interface and at least one sender of messages, and/or to negotiate a timetable with at least one sender of messages as a shared secret.

Network interface protected against attacks

The time synchronization of a network is protected against unauthorized changes to the grandmaster clock of a base time domain by monitoring the physical communication interfaces of a network device for arrival of messages relating to time synchronization. If the messages relating to time synchronization apply to the initially set-up and synchronized base time domain, a check is performed to determine whether the messages relating to time synchronization announce a new grandmaster clock having better clock parameters than those of the present grandmaster clock. If so, a virtual base time domain is started by the network device. If the verification reveals that the proposed new grandmaster clock is trustworthy or valid, the network device discontinues the virtual time domain, updates its stored information concerning the grandmaster clock and, from this time onward, sends messages relating to time synchronization that are based on the new clock parameters to the network.

Method for protecting the time synchronization in a network against unauthorized changes

A control unit architecture and a method in which a communication connection takes place between at least two control units, in particular in a vehicle. The method includes receiving the data packet by the first interface controller; determining, by a data analyzer, a transmission strategy for the data packet, the transmission strategy including at least one of the following actions: rejecting the data packet, and/or sending the data packet to at least one of the second interface controllers, and/or sending the data packet to at least one of the buffer stores, and/or fragmenting the data packet and sending it to at least one of the buffer stores, and/or sending the content of the at least one buffer store to at least one of the second interface controllers; implementing the transmission strategy for the data packet.

Control unit architecture for vehicles

An apparatus for configuring and validating an intervention in a real-time Ethernet data network for a motor vehicle includes: a vehicle diagnostic device, a first data storage device, a first data checking device, a second data storage device, and a second data checking device.

Apparatus for configuring and validating an intervention in a real-time ethernet data network

A method for operating an Ethernet on-board electrical system of a motor vehicle includes determining a propagation time or delay of a first signal on a first connection path between a first control unit of the Ethernet on-board electrical system and a second control unit of the Ethernet on-board electrical system. A maximum speed of the first connection path is determined. A type of transmission medium of the first connection path is determined on the basis of the connection delay and the maximum speed. A control unit for an Ethernet on-board electrical system and an Ethernet on-board electrical system for a motor vehicle are also provided.

Method for operating an ethernet on-board electrical system of a motor vehicle, control unit and ethernet on-board electrical system

A method for detecting unauthorized eavesdropping. A first subscriber determines a transit time for the transmission of data to a second subscriber, adds the random value to the transit time to obtain a waiting time, waits for the waiting time, creates a data packet containing a time stamp and transmits this data packet to the second subscriber. The second subscriber records the time it receives the data packet and compares it with the time stamp contained in the data packet, determines that the data packet has arrived either: before the time indicated in the time stamp, more than a predefined tolerance time after the time indicated in the time stamp, or before or more than a predefined tolerance time after a time at which it can be expected in the second subscriber as an indication that communication between the first subscriber and the second subscriber is being eavesdropped on.

Monitoring a network connection for eavesdropping

A gateway for data communication in a vehicle includes: a first communication interface, configured to use a first communication protocol; and a second communication interface configured to use a second communication protocol. The gateway is configured to transmit data from the first to the second communication interface and to transmit data from the second communication interface to the first communication interface. The gateway further includes a media converter configured to convert quality of service information from the first to the second communication protocol and from the second to the first communication protocol.

Gateway for data communication in a vehicle

A method establishes an improved clock topology for a computation system, where the computation system is a network of nodes, and where multiple nodes are capable of being a grandmaster clock source. The method includes sequentially selecting each selectable node as an acting grandmaster node, the acting grandmaster node sending announce messages, each node with a determinative communication requirement extracting topology information from the announce messages. The above steps are repeated with another node until each selectable node has been an acting grandmaster. The method then includes selecting the clock source based on the best clock topology for the set of nodes with determinative communication requirements.

Clock topology in an ethernet network

A node may determine the topology of a computation system. The computation system is a network of nodes and multiple nodes are capable of being a grandmaster clock source. The method includes starting a best clock selection process, announcing clock information, and if the node is not acting grand master then receiving messages announcing clock information from other nodes of the network. Topology information is extracted from the messages, and if the node is acting grandmaster then retiring from the position of grandmaster. The best clock selection process steps are repeated until no node of the network becomes acting grandmaster.

Growing community of inventors

Magdeburg, Germany

Helge Zinner