Robert Boschgmbh

Marcel Kneib

Oleg Schell

Manuel Jauss

Felix Hallaczek

Christopher Huth

Michael Weber

Clemens Schroff

Jo Pletinckx

Joachim Graf

Friedrich Wiemer

Razvan Florin Aguridan

Herve Seudie

Nils Benecke

Alexander Kaucher

Carsten Nobbe

A method for remote verification of the integrity of a computer program in a computing unit to be checked using a verification unit. The computer program is specified by a reference program code and is in the form of stored program code in the computing unit to be checked. The method includes: selecting, by the verification unit, a pair from a list of pairs in which each pair includes a random character string and a reference check value calculated using a check value function based on the random character string of the pair and the reference program code; transmitting the random character string of the pair to a validation unit; receiving a comparison check value calculated using the check value function based on the transmitted random character string and the stored program code; comparing the received comparison check value to the reference check value of the selected pair.

Method and system for remote verification of the integrity of a computer program in a computing unit to be checked

A computer system for providing a plurality of functions for a device, in particular for a vehicle. The computer system has a plurality of system modules configured to provide functions that are differently critical for the operational security of the device. Each system module or a part of a system module is assigned to one zone of a plurality of zones, a zone being a logically and/or physically delimitable unit in the computer system. A first zone is more trustworthy than a second, less trustworthy zone, the danger of a manipulation of a more trustworthy zone being less than of a less trustworthy zone. A first, more critical function being provided by a system module of the first zone and a less critical function being provided by a system module of the second zone.

System for providing a plurality of functions for a device, in particular for a vehicle

A node device for a bus system, including a transceiver for connecting to a bus of the bus system; a controller connected to the transceiver via a transmit line and via a receive line, the controller and the transceiver designed to transfer data from the controller to the transceiver via the transmit line and transferring data from the transceiver to the controller via the receive line; a processor; and an intrusion detection system; the processor being connected to the transceiver via a controller bypass line and being designed to, via the controller bypass line, intercept an intrusion into the bus system identified by the intrusion detection system, the intrusion detection system being designed to detect an intrusion into the bus system in which a further node of the bus system sends a frame including an identifier assigned to a third node of the bus system to the bus.

Frame invalidation in the bus system including intrusion detection system

A computer-implemented method. The method comprises analyzing a communication, secured by one or more cryptographic methods, between a first component of a plurality of components of an on-board network of a vehicle and a central device for mitigating a software manipulation. The central device for mitigating a manipulation is part of the on-board network and is designed for software mitigation in each of the plurality of components of the on-board network. The method further comprises identifying the possibility of a manipulation of the software of the first component in the central device for mitigating a software manipulation, based on the analysis of the communication, and initiating a countermeasure to mitigate the manipulation of the software of the first component by way of the central device for mitigating a manipulation.

Mitigating a vehicle software manipulation

A computer-implemented method for processing data which are associated for example with a signal transmittable and/or transmitted via a bus system, for example of a vehicle, including: at least intermittent provision of reference data for a statistical model which characterizes at least one average of at least one characteristic of the signal on the basis of a first average determined, for example dynamically, over a predefinable unweighted first number of values for the characteristic, and at least intermittent modification of the reference data at least in part on the basis of a second average determined, for example dynamically, over a predefinable weighted second number of values for the characteristic.

Method and device for processing data associated with a signal

A computer-implemented method. The method includes recognizing the possibility of a manipulation of the software of a first component of a plurality of components of a vehicle electrical system of a vehicle in a central device for mitigating a manipulation of software. The central device for mitigating a manipulation is part of the vehicle electrical system, and is designed to mitigate a manipulation of software in each component of the plurality of components of the vehicle electrical system. The method further includes initiating a countermeasure for mitigating the manipulation of the software of the first component and carrying out the countermeasure for mitigating the manipulation of the software of the first component. The countermeasure includes changing a functionality of the first component and at least partially shifting the functionality of the first component to one or multiple other components of the plurality of components.

Mitigation of a manipulation of software of a vehicle

A method for checking a message in a communication system, in which multiple users are connected to a communication medium and exchange messages via same. A time difference between points in time of reception of a message that is sent on the communication medium is ascertained at two different, predefined positions on the communication medium, and based on a comparison of the time to at least one reference time difference, it is determined whether the message originates from a verified user.

Method for checking a message in a communication system

A method for evaluating a signal that is, for example, transferred and/or receivable via a bus system. The method includes: ascertaining a first variable that characterizes a length of a bit sequence associated with the signal, for example, the bit sequence including n bits, where n is greater than or equal to one, and optionally ascertaining a second variable that characterizes a deviation of the length of the bit sequence from a reference bit sequence that includes n bits.

Method and device for evaluating a signal

A method, particularly a computer-implemented method, for determining information of a bus system that has a transmission medium via which signals are transmittable. The method includes: determining a first variable which characterizes a time difference between a first point in time and a second point in time, a signal output by a transmitter onto the transmission medium of the bus system reaching a first position relative to the transmission medium at the first point in time, and the signal output by the transmitter onto the transmission medium of the bus system reaching a second position relative to the transmission medium at the second point in time; evaluating the first variable, at least one time-to-digital converter device being used for determining the first variable.

Method and device for determining information of a bus system

A method for authenticating a message transmitted via a communication channel, including the following: sampling recurring signal edges within a data frame of the message, sampling values being obtained with a start time that is offset between the signal edges, reconstructing an average signal characteristic of a part of the message from the sampling values, calculating signal-technical properties of the data frame from the signal characteristic, and the message is authenticated based on the properties.

Method and device for authenticating a message transmitted via a bus

A method for checking a message in a communication system, in which multiple users are connected to a communication medium that includes two signal lines and exchange messages via same. A time difference between points in time of reception of a message that is sent on the communication medium is ascertained at two different, predefined positions on the communication medium, and based on a comparison of the time difference to at least one reference time difference, it is determined whether the message originates from a verified user. During the ascertainment of the time difference at the two positions, in each case a difference signal is formed from signals that have resulted on the two signal lines due to the message.

A method is provided for protecting a vehicle network of a vehicle against manipulated data transmission, in which the vehicle network includes multiple network nodes, and at least one first network node in the vehicle network in a normal mode checking a first received message as to whether the first received message is a message assigned to the first network node in the normal mode, but which the first network node did not transmit. The first network node in a diagnostic mode further checks a second received message as to whether the second received message is a message assigned to the first network node in the normal mode or in the diagnostic mode, but which the first network node did not transmit.

Method for protecting a vehicle network against manipulated data transmission

A method for protecting a network having multiple network subscribers against a cyberattack, in which bits or bit sequences of a message are transmitted between the network subscribers in the network via different voltage levels on at least one transmission route of the network. For this purpose, at least one characteristic of the voltage levels or of the transmitted bits or bit sequences is actively modified in at least one of the network subscribers or on the at least one transmission route and the origin of the transmitted bits or of the at least one transmission route is determined on the basis of the at least one characteristic. The cyberattack on the network is detected or the cyberattack on the network is localized in the network as a function of the ascertained origin.

Method for protecting a network against a cyberattack

A method is provided for protecting a vehicle network of a vehicle against manipulated data transmission. The vehicle network includes multiple network nodes. At least one first network node in the vehicle network compares received messages with messages assigned to the first network node and detects the manipulated data transmission if one of the received messages coincides with a message assigned to the first network node, but the first network node did not send the message. At the same time, the first network node compares only selected messages of the received messages with the messages assigned to the first network node or compares the received messages only with selected messages assigned to the first network node.

Growing community of inventors

Mainhardt, Germany

Marcel Kneib