Robert Boschgmbh

Robert Kaster

Bertram Foitzik

Matthias Kistner

Otmar Bussmann

Urs Bauer

Rolf Ellwein

Robert John Lambert

Michael R Meier

Frederic Marcel Sejalon

Martin Koegel

Walter Heinrich

Helmut Binder

Carlos Atoche

Stefan Knoll

Ket Seng Koh

Thomas Loebe

John Hobbs

Ryan Rummer

Francis Henry Kasperski, Iii

Hideo Takada

Gareth Selfe

Richard Breitzman

Darin Rohrkemper

Eric Stuckey

Systems and methods for performing vehicle software attestation. One system includes an electronic control unit (ECU) master included in a vehicle and a verifier system. The ECU master receives a digital shadow request generated by the verifier system and generates a digital shadow. The digital shadow is based on a unique, one-way identifier of a program memory space of the ECU master and a unique, one-way identifier of a program memory space of each of a plurality of other ECUs included in the vehicle. The ECU master transmits the digital shadow to the verifier system. The verifier system receives the digital shadow from the ECU master as a first digital shadow, receives a second digital shadow from a digital twin representing software installed in the ECU master and each of the plurality of other ECUs, and determines whether the first digital shadow matches the second digital shadow.

Digital shadows for remote attestation of vehicle software

Systems, methods, and vehicles for verifying integrity of automotive software. In one implementation, an electronic processor is configured to receive a power-up signal and randomly select one of a plurality of fingerprints. The electronic processor is also configured to retrieve a set of data stored in the memory cells of the selected fingerprint. The electronic processor is further configured to calculate a pre-boot verification value for the selected fingerprint using a one-way cryptographic function with a secret key and the retrieved set of data. The electronic processor is also configured to compare the pre-boot verification value to a reference verification value for the selected fingerprint. The electronic processor is further configured to release a security halt on the software image when the pre-boot verification value matches the reference verification value for the selected fingerprint.

Accelerated verification of automotive software in vehicles

A vehicle includes a rear door, at least one sensor component proximate to the rear door, an alert system, a memory in which program instructions are stored, and a processor operably connected to the alert system, the at least one sensor component, and the memory. The processor executes the program instructions to detect an object within a detection zone of the at least one sensor component relative to the rear door. The processor further activates the alert system in response to the object being within a predefined protection zone of the detection zone when the rear door is not moving.

Rear door warning system

A method for operating a regenerative braking system of a vehicle by activating at least one motor employable in generator mode taking into consideration a first information with regard to a requested setpoint total braking torque and a second information with regard to an available generator braking torque which is maximally executable by the at least one motor employable in generator mode, if the setpoint total braking torque exceeds a threshold value and/or a piece of warning information regarding a transition to a backup level that is potentially imminent or has occurred of the regenerative braking system, even if the setpoint total braking torque is less than or equal to the maximally executable available generator braking torque, sufficient brake fluid is transferred via at least one hydraulic actuator to a wheel brake cylinder of the regenerative braking system that an air gap of the particular wheel brake cylinder is closed.

Method for operating a regenerative braking system of a vehicle and control unit for a regenerative braking system of a vehicle

Systems and methods for confirming a cryptographic key. The system includes an electronic controller configured to generate an electronic message in response to an installation of a secret key on the electronic controller, the electronic message comprising information about the installation of the secret key, digitally sign the electronic message using a manufacturer private key, encrypt the electronic message, store the electronic message in a memory, access the stored electronic message in response to a request by a user, decrypt the electronic message, confirm a digital signature of the electronic message using a manufacturer public key, generate a confirmation message, and send the confirmation message to a user.

Systems and methods for confirming a cryptographic key

An integrated monitoring system for a vehicle including a brake pad wear sensor and a wheel speed sensor. A wheel speed sensor signal line is connected between the wheel speed sensor and an electronic control unit. A wheel speed power line is connected between the wheel speed sensor, the brake pad wear sensor, and the electronic control unit. The electronic control unit is configured to monitor the wheel speed sensor signal line for a signal indicative of a wheel speed and monitors the wheel speed power line for a signal indicative of a brake pad condition.

Integrated wheel speed and brake pad wear monitoring system

Methods and systems for reducing vehicle and animal collisions. One system includes an electronic processor configured to receive vehicle data. The electronic processor is also configured to determine a collision risk of the vehicle based on the vehicle data, the collision risk representing a probability of a collision between the vehicle and an animal. The electronic processor is also configured to adjust a collision parameter of the vehicle based on the collision risk. The electronic processor is also configured to identify when an animal is in a path of the vehicle based on the vehicle data. The electronic processor is also configured to, when an animal is identified in the path of the vehicle, automatically perform a vehicle operation based on the adjusted collision parameter.

Methods and systems for reducing vehicle and animal collisions

A method and system for securing a controlled area network (CAN) of a vehicle is disclosed, where the CAN has a number of electronic control units (ECUs) that control vehicular systems. An on-board diagnostic port of the vehicle is monitored for suspicious activity which does not fit within the baseline profile of the destination ECU. If suspicious activity is detected, countermeasures are taken to minimize harm, such as placing the vehicle in safe mode, reducing the functionality or disabling non-critical ECUs, resetting the targeted ECU, and notifying the driver and non-targeted ECUs.

Security monitor for a vehicle

A control apparatus for hydraulic components of a braking system of a vehicle, having a control application device that is designed to establish by application of control to the hydraulic components, in consideration of the braking request, at least one brake pressure in at least one wheel brake cylinder in such a way that the braking request is satisfiable; and to execute an antilock braking function at the at least one wheel brake cylinder, the control application device additionally being designed to ascertain whether at least one furnished actual value with regard to a displacement travel (s) of a brake actuation element of the vehicle out of its initial position, and/or with regard to a simulator volume shifted out of a brake master cylinder of the vehicle into a linked simulator, lies within at least one predefined extreme value range.

Control apparatus for hydraulic components of a braking system of a vehicle, and method for executing an antilock braking function at at least one wheel brake cylinder of a vehicle

A control system for an electric motor usable as a generator of a vehicle includes: a first control device and a second control device each configured to define, in consideration of at least one furnished first specification signal with regard to a driver-requested or autonomously requested braking input, at least one target braking torque variable with regard to at least one generator braking torque to be exerted by way of the at least one electric motor on at least one wheel of the vehicle and/or on at least one axle of the vehicle, and to output to the at least one electric motor, and/or to at least one electronic control system of the at least one electric motor, at least one output signal corresponding to the at least one target braking torque variable.

Control system for at least one electric motor, usable as a generator, of a vehicle; and braking system for a vehicle

Systems and methods for detecting unintended acceleration of a vehicle. One system includes a first sensor that provides information on a brake booster vacuum. The vacuum is provided by the vehicle's engine and the brake booster multiplies a braking force initiated by a driver. A second sensor provides information on the vehicle's speed, and a third sensor provides information on the braking force initiated by the driver. The system also includes a controller configured to receive the information from the first sensor, second sensor, and third sensor and initiate corrective action if the brake booster vacuum is less than a predetermined threshold, the vehicle's speed is greater than a predetermined threshold, and the braking force initiated by the driver is greater than a predetermined threshold.

Unintended acceleration detection and correction

A traction control system includes a master cylinder containing brake fluid, braking devices configured to apply braking force to associated wheels of the vehicle, a brake pedal operable by a driver of the vehicle to generate braking force by pressurizing the brake fluid, and an inlet valves for storing pressurized brake fluid to apply and temporarily hold a braking force at a slipping driven wheel. A method of providing traction control for a vehicle includes manually switching the vehicle from a normal operating mode to a traction control mode, sensing the slippage of a driven wheel, applying a braking force to the slipping driven wheel in response to a driver of the vehicle pressing a brake pedal, maintaining the braking force on the slipping driven wheel after the brake pedal is released, and gradually releasing the braking force as the slipping driven wheel gains traction.

Traction control system and method

Methods and systems for supplying auxiliary electrical power to a controller during power loss are described hereinabove. The system is powered by a primary power source, and includes a controller and a winding load that are both powered by the primary power source, and a switching device. When the primary power source is disconnected from the controller and winding load, the winding load continues to residually exercise to generate residual electrical power. The second switching device then channels the residual electrical power to the controller for a period of time at an acceptable level.

Extended controller keep alive system and method

The present invention provides an electronic circuit and EMI countermeasure for an automotive electronic control unit that provides a maximum amount of EMI protection under normal operating conditions, i.e., ambient temperatures. The effectiveness of the EMI countermeasure is limited at extremely high temperatures. The electronic circuit and EMI countermeasure optimizes the effectiveness of EMI countermeasures as a function of temperature to improve performance under normal conditions.

Thermal optimization of EMI countermeasures

A steering angle sensing system includes at least one steering angle sensing device for outputting an analog signal representative of a steering angle position of a steering wheel. A first processor is operably coupled to the at least one steering angle sensing device and is disposed proximate the at least one steering angle sensing device. The first processor receives the analog signals output by the at least one steering angle sensing device, computes a steering angle value based upon the analog signals, and outputs a pulse width modulated signal representative of the computed steering angle value. A second processor is disposed non-proximate the at least one steering angle sensing device and is operably coupled to the first processor to thereby receive the pulse width modulated signal representative of the computed steering angle value.

Growing community of inventors

White Lake, MI, United States of America

Robert Kaster