Robert Boschgmbh

Timo Lothspeich

Volker Blaschke

Florian Hartwich

Arthur Mutter

Jorge Guajardo Merchan

Christian Horst

Andreas Mueller

Michael Poehnl

Marco Andreas Wagner

Michael Buchalik

Anton Pfefferseder

Juergen Schirmer

Tobias Lorenz

Clemens Schroff

Reiner Schnitzer

Shalabh Jain

Franz Bailer

Thorsten Huck

Herbert Leuwer

Juergen Motz

Janin Wolfinger

Andreas Soenkens

Stefan Gehrer

Andre Owerfeldt

Nils Draese

Bjoern Kasper

Thorsten Schwepp

Thomas Keller

Florian Klingler

Michael Ernst Doering

Jeffrey Lee

Guenter Vogel

Juergen Mallok

Thomas Wollenhaupt

Slava Tihovsky

Tobias Gruber

Daniel Barisic

Christoph Burger-Scheidlin

Soeren Krieger

Basti Anil Shenoy

Britta Kronenberg

Saraswathy Ramanathapuram Vancheeswaran

Gita Woite

Marco Beckmann

Matthias Zabka

Georg Schill

Stefan Abendroth

Christoph Burgrscheidlin

Andreas Muellerr

A system includes a memory and a processor in communication with the memory. The processor is programmed to receive a runtime measurement from a sensor regarding the physical attribute of at least the separate processor during runtime; compare the runtime measurement of the physical attribute to a fingerprint that includes a baseline measurement of a physical attribute of at least a separate processor during an evaluation period of the system, and in response to the measurement exceeding a threshold, executing a countermeasure operation against software ran by the separate processor.

System and method for network intrusion detection based on physical measurements

A device for processing data, including at least two data interfaces, a first data interface of the at least two data interfaces being designed to at least temporarily exchange first data with at least one first external unit according to a first communication protocol, in particular CAN and/or FlexRay and/or LIN and/or MOST and/or Ethernet, a second data interface of the at least two data interfaces being designed to at least temporarily exchange data with a second external unit and/or the first external unit according to a second communication protocol, which is different than the first communication protocol, the device including a security unit, which is designed to at least temporarily carry out at least one security function with regard to at least one of the at least two data interfaces.

Device for processing data including at least two data interfaces, and operating method therefor

A computer-implemented method for managing a memory in a network to which a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network in the process. If the first message is to be stored, a second message is randomly selected from the messages stored in the memory, the randomly selected second message is deleted from the memory, and the first message is stored in the memory.

Method for managing a memory

A computer-implemented method for managing a memory in a network, to which, in particular, a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network, and it is randomly decided whether or not the first message is to be stored in the memory. Depending on the random decision, the first message is stored or is not stored in the memory.

A battery terminal which implements an electronically controlled vehicle electrical system coupling-disconnecting functionality including an electronically controlled power distribution, the battery terminal including a number of switching elements, of which at least some are connected to one another in a star point shape, the star-point connection being provided to be connected to a positive pole of a voltage source.

Battery terminal with a star-point connection switch configuration for a vehicle electrical system

Disclosed is a method for generating a secret or key in a network having first and second subscribers and a transmission channel therebetween. The first and second subscribers generating first and second sequences of subscriber values to achieve synchronous transmission; and the first and second subscriber each generate a common secret, the first subscriber doing so based on information about the first sequence and a superposition of the second sequence onto the first sequence on the transmission channel, and the second subscriber doing so based on information about the second sequence and the superposition of the second sequence of subscriber values onto the first sequence of subscriber values. At certain intervals or in accordance with a detected sequence of superposed values, the first or second subscriber outputs at least one filler value onto the transmission channel such that an edge change or change in values occurs on the transmission channel.

Method for generating a secret or a key in a network

A method for averting a manipulation on a CAN bus using a first node connected to the bus by a CAN controller includes a secured transmit module of the first node monitoring the bus; the transmit module recognizing transmission processes of the CAN controller in a normal operation of the first node; the transmit module recognizing a message transmitted impermissibly on the bus in a manner deviating from the normal operation; and, in the event the transmit module recognizes the message, the transmit module initiating countermeasures provided against the manipulation.

Method and device for averting a manipulation on a CAN bus using a node connected to the bus by a CAN controller

A method for transmitting a message in a vehicle, in which the message is received according to a source protocol, a communication mechanism which is used by the message and corresponds to the source protocol is converted in such a way that the communication mechanism corresponds to a canonical protocol, the communication mechanism corresponding to the canonical protocol is converted in such a way that the communication mechanism corresponds to a predefined target protocol, and the message is transmitted according to the target protocol.

Method and device for transmitting a message in a vehicle

The present invention relates to a communications system () with at least one node (), a control instance () and a shared communications medium (). The at least one node is designed to receive messages that are or were transmitted in a first transmission mode. This first transmission mode has a lower data transmission rate and/or transmission complexity than a second transmission mode. The control instance () determines a first of the nodes in order to transmit data thereto in the second transmission mode or in order to release the shared communications medium () for the first node to transmit data in the second transmission mode. The control instance communicates this to the first node by means of a message (). This message is transmitted in the first transmission mode.

Communications system with control of access to a shared communications medium

A method, a device, and a computer program for operating a data processing system, including at least two nodes that are connectable via a data line for transmitting messages. A message includes an identifier for arbitrating messages to be transmitted, the identifier containing&#x2014;information concerning a priority via which a processing sequence of messages ready for transmission is determined, and the identifier&#x2014;containing information concerning a network node, via which a sender of the message is unambiguously determined, and&#x2014;containing information concerning a service, via which a service is determined.

Method, device, and computer program for operating a data processing system

A gateway, operable in a hierarchical heterogeneous network, includes at least two interfaces of which at least one is connectable to a lower network level, and the communication protocols in the network provide a message for offering a service and a message for searching for a service, receipt of a message coming in from a lower network level in the gateway at an interface for offering a service, and/or an item of information identifying the offered service, is noted in the interface receiving this message or in a management unit assigned thereto, and receipt of a message from a lower network level in the gateway at an interface for searching for a service and/or an item of information identifying the sought service is noted in the interface or management unit, and if the messages relate to the same service, a message for the service availability is sent via the interface.

Method for operating a gateway in a hierarchical heterogeneous network by comparing offer messages and search messages received at the gateway regarding a service to determine if the messages relate to the same service and forwarding search messages that do not relate

The invention relates to a method for processing at least one data packet () which comprises a first header () and a payload (), wherein the first header () is processed by a first mode and the payload () is processed by a second mode, wherein a number of processing steps () for carrying out the second mode is greater than a number of processing steps () for carrying out the first mode, the two modes being performed separately from one another.

Method for processing a data packet

The invention relates to a communications method that comprises the step of sending a query message from a central entity to at least one node. For every queried node, the central entity determines a node-specific time window based on a node-specific response time. The central entity filters out a response message, sent from the queried node, from the signals received during this time window. Based on the node-specific time window, the central entity assigns the response message to the queried node. The invention also relates to a computing unit that is configured to operate as a central entity, to a communications system, as well as to a computer program and a computer-readable storage program with said computer program.

Communications method in a communications system

In a having a plurality of levels, each level has at least one information node; a number of information nodes of a lower k+1-th level are assigned to an information node of a k-th level configured thereabove and linked to this one information node; one information node of the lower k+1-th level is designed to inform the information node of the k-th level configured thereabove, which pieces of information the information node of the k+1-th level needs, and which pieces of information the information node of the k+1-th level is making available.

Network

In a method for processing messages with the aid of at least one Ethernet controller having a message store, the at least one Ethernet controller checks a received message for the presence of at least one property, and the received message is stored in the message store if this at least one property applies to the message.

Method for processing messages

Growing community of inventors

Weissach, Germany

Timo Lothspeich