Method for checking data integrity

Abstract

To provide a method for checking data integrity.SOLUTION: The invention relates to a method (100) for checking data integrity during transmission (130) of data (210) in a vehicle (1), the method (100) automatically executing the steps of: determining (101) the data (210) in the vehicle (1); executing a preparation (110) for the transmission (130) of the determined data (210), where at least one artificially generated and reproducible replacement component (230) is defined as an approximation to a data component (220) of the data (210) by replacement information (231); executing the transmission (130) of the data (210); and executing a data integrity check on the transmitted data (210) based on the replacement information (231).SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a method for checking data integrity. Furthermore, the invention relates to a computer program and an apparatus for this purpose. [Background technology]

[0002] From the prior art, various methods are known to ensure data integrity. Checksum calculation (e.g. CRC) is often used. By recalculating this value at the receiving end and comparing it with the accompanying transmitted checksum, errors in the data transmission can be detected.

[0003] However, when transmitting relatively large data, such as video data, such checksum calculation requires significant processing power due to the large data volume, resulting in additional energy consumption.

[0004] The subject of the present invention is a method comprising the features of claim 1, a computer program comprising the features of claim 10 and an apparatus comprising the features of claim 11. Further features and details of the invention emerge from the respective dependent claims, the description and the drawings. Features and details mentioned here in connection with the method according to the invention naturally also apply in connection with the computer program according to the invention and the apparatus according to the invention and vice versa, respectively, so that reference is or can always be made alternately with respect to the disclosure to the individual aspects of the invention. Summary of the Invention [Problem to be solved by the invention]

[0005] The method thus serves to check data integrity during transmission of the data, preferably in the vehicle, where data integrity in particular refers to a state of complete, error-free data, in particular free from tampering or errors. [Means for solving the problem]

[0006] In particular, the following steps: - determining data at the vehicle, for example by receiving the data as sensor data from a sensor of the vehicle, preferably an electronic image sensor; - carrying out a preparation for the transmission of the determined data, in which at least one or exactly one artificially generated and reproducible replacement component is defined by the replacement information, preferably as an approximation to the data component of the data, and / or a replacement component is generated and / or added to the data; - carrying out a transmission of data, in particular with replacement information and / or replacement components, preferably from the decentralized zone control devices and / or from the sensors to a central control device of the vehicle; - performing a data integrity check on the transmitted data based on the substitution information, preferably performed by a central control device; It is contemplated that the steps are performed automatically, preferably sequentially in a specified order, and / or repeatedly.

[0007] In this way, by using the substitution information to check the data integrity, it is possible to detect errors during the transmission of the data. Since the substitution information depends on the original determined data, conclusions can be drawn on the basis of the substitution information as to whether there is a corruption of the data after transmission. For example, the substitution information is a seed key determined by measuring the noise characteristics of the sensor to determine the data. In this specific case, the seed key allows the generation of a pseudo-noise that closely resembles the noise actually present in the determined data. Moreover, the pseudo-noise, unlike the real noise, is bit-identically reproducible on the basis of the substitution information. Then, in some cases, the pseudo-noise can be added, i.e. applied, to the data to be transmitted. This can also be called the injection of a reproducible pseudo-noise. If a change in the data occurs during transmission, this can be recognized on the receiving side on the basis of check information that can be added beforehand to the data, for example at least one additional bit, by generating a pseudo-noise on the basis of the substitution information and removing the generated pseudo-noise from the transmitted data. In the case of an error-free transmission, the pseudo-noise should be able to be correctly removed, otherwise an error or tampering during transmission is detected. It can therefore be checked accordingly whether the change in the transmitted data is recognizable.

[0008] It may also be contemplated within the scope of the invention that a preparation is carried out to prepare the data for data compression. For this purpose, data components of the data may be removed, which may therefore result in what can be described as a lossy compression of the data. Before transmission, a data compression run of the prepared data may be carried out, the data to be transmitted being data compressed by the data compression. Furthermore, during transmission of the compressed data, replacement information may also be transmitted instead of the removed data components. In this way, the method according to the invention may have the advantage that a synergy with data compression is used during a check of data integrity. Conventional methods for ensuring data integrity, for example checksum calculations such as CRC (Cyclic Redundancy Check), require considerable processing power at high data rates, such as during video transmission. Due to the synergy with data compression, this may be achieved with significantly less processing power. Here, advantages may be achieved not only by reducing the amount of data by compression, but also by a combination of data processing steps during data compression on the one hand and data processing steps during preparation for transmission and / or during the execution of a data integrity check on the other hand. Furthermore, the addition of pseudo-noise to the transmitted data occurs during the data compression process and can therefore provide a synergistic effect with data integrity checking when the pseudo-noise is used for data integrity checking as described within the scope of the present invention.

[0009] Furthermore, within the scope of the present invention, it may be envisaged that the data component, also referred to in particular as the first data component, is a noise component of the data, and the substitution component is an artificially generated noise, in particular a pseudo-noise. Possibly, the substitution component may be defined by specifying substitution information, in particular a seed key for a random number generator. In this way, after transmission, the substitution component may be bit-identically reproduced based on the substitution information. For bit-identical reproduction, for example, the substitution information from a generator, in particular a random number generator, is used to generate the substitution component in the form of a two-dimensional matrix. The seed key may be determined, for example, by measuring the noise characteristics of a (real) image sensor. The statistics of this pseudo-noise thus correspond in some cases to the statistics of the noise that actually occurs in the image sensor, but are bit-identically reproducible.

[0010] Not only can the substituted component be reproduced bit-identically based on the substitution information after transmission, but also the compressed data by the data compression can be reproduced bit-identically after transmission. For this purpose, the data compression may be implemented in the form of lossless data compression. However, in combination with the preparation, a lossy data compression of the data may occur, since here the first data component is removed and lossless data compression is applied only to the remaining components of the data. "Bit-identical" means, in particular, that each bit of the data can be restored to be identical and therefore lossless.

[0011] Optionally, it may be provided that the data in the form of image data is determined by at least one image sensor of the vehicle, and the replacement information and / or the replacement component is determined by, in preparation, determining noise characteristics of the at least one image sensor and / or performing a noise evaluation of the determined image data, and defining the replacement component as an approximation to the data component in the form of pseudo-noise, which allows the addition of pseudo-noise, since it corresponds to the statistics of the image sensor and therefore does not degrade the image information.

[0012] For checking the data integrity, the determination or preparation can include the addition of check information, which can be checked after transmission based on the replacement information. This addition can be done, for example, before or simultaneously with the determination and / or removal of the data components and / or the addition of the replacement information and / or replacement components and / or the data compression, summarizing here the necessary processing power. Correspondingly, during preparation, check information can be added to the data, and also data components of the data can be removed and / or artificially generated reproducible replacement components can be defined as approximations to the removed data components by the replacement information, and / or replacement information and / or replacement components can be added to the data. It is also possible to add check information during determination, i.e. for example to record image data with an image sensor and combine it with additional bits. The check information can for example include additional bits, preferably pixels, having a predefined value such as "0" at known positions of the data, preferably image data. It is also possible to add replacement components, for example pseudo noise, after the addition of the check information to the data, thereby modifying the check information. If after transmission the pseudo-noise is regenerated and subtracted from the data, thereby restoring the check information to be identical, then an error-free transmission can be detected. Alternatively or additionally, the checksum of the check information or additional bits and / or the checksum of the check information or additional bits as modified by the substitution component after addition of the substitution component may be known and evaluated after transmission to detect an error-free transmission.

[0013] In other words, the method according to the invention allows the guarantee of the quality of the data by embedding a quality indicator in the compression method. In particular, the use of a pseudo-noise that corresponds statistically to the noise of the sensor used, but can be reproduced bit-identically by the seed key, allows the time-consuming checksum calculation to be significantly simplified or eliminated. It is therefore possible to protect the transmission of data against errors with less computational effort and therefore less energy consumption. Furthermore, the use of a reproducible pseudo-noise also offers the advantage that the receiver can know in advance what value the checksum for a particular bit will have. Thus, the value can be statically pre-calculated, thus further reducing the computational effort. Thus, the addition of the pseudo-noise, especially the possible combination with lossy compression methods working together with addition, creates advantageous synergistic effects.

[0014] The replacement component may be an approximation to a data component of the data. The data component and the replacement component may each be understood as a component of the image record, possibly representing a component of each pixel. For example, the data component is a noise component. Optionally, the data component may then be removed from the data. It may also be contemplated that multiple replacement components are defined for the same data, for example for data compression upon subsequent removal of the data component on the one hand, and for checking data integrity on the other hand, for which a replacement component is added to the data. Here, within the scope of the present invention, a reference to a replacement component refers individually to one of the defined replacement components or to all replacement components defined for the same data.

[0015] Moreover, the above data compression has the advantage that more relevant data can be transmitted even if the data connection used for transmission is only a lower bandwidth connection. Here, the data can be compressed much stronger than is possible in many conventional methods. At the same time, data corruption can be avoided, since not only is the first data component removed, but a replacement component is additionally prepared as an approximation to the removed data component.

[0016] At least one replacement component may be generated artificially and / or may be reproducible. This means that the replacement component is not obtained from a modification or alteration of the removed data component, but may be generated completely artificially based on the replacement information without knowledge of the removed data component. For this purpose, a generator, such as for example a random number generator, is used, which may generate the replacement component, for example as a matrix or vector of random numbers, based on the replacement information, for example a seed. This has the advantage in terms of data compression that the replacement component itself does not have to be transmitted, but only the replacement information. If the replacement component is transmitted, for example for a data integrity check, this has the advantage that transmission errors can be determined based on the transmitted replacement component. For this purpose, the transmitted replacement component can be compared with a replacement component that is generated again, for example at the receiving side. The replacement information only needs to be a key, such as a seed key, and therefore has a data size of a few bits, which is significantly smaller than the replacement component and the removed data component. For example, the replacement information has at most 1% of the data size of the replacement component and / or the removed data component.

[0017] The data can preferably be realized as an image record, for example video data, and can therefore comprise a sequence of image data. Data compression has the advantage that the amount of data to be transmitted can be reduced. The first data component can be a specific component of the data that can be characterized and selected according to a predefined, in particular statistical, criterion. Once the first data component has been removed, the prepared data can only comprise the data component remaining after the removal (in the context of the present invention, the removed data component is also called the first data component and the remaining component is also called the second data component). The remaining component can comprise relevant information content, such as a record of the vehicle's environment. The removed data component, on the other hand, can comprise a smaller, mainly random information content and can represent only statistically distributed energy, for example as noise.

[0018] In addition to defining and / or adding replacement components of the data for later checking data integrity, it is also possible to remove first data components to achieve improved data compression. It is therefore considered that the removal of the first data components, especially the noise components, allows the data to be compressed much stronger than in the case of conventional methods. The removed first data components may contain a more random and statistically distributed information content, so that compression is only possible inefficiently. Instead, the mainly random content of the removed data components allows them to be statistically approximated, thus allowing their replacement by artificially generated replacement components. On the other hand, the data components remaining after the removal cannot be statistically imitated due to their mainly non-random information content, but can nevertheless be better compressed due to their extensive redundant information. In other words, the determined data may consist of a random first data component, especially noise, and a second data component with a high proportion of redundant information. When the data is realized as image data, the first data component may be the (superimposed) noise component of the image, and the second data component may be the remaining component of the image after the noise has been subtracted. This is also true for each pixel of an image, which may consist of a first data component (random, noise) and a second data component (redundant). In particular, lossless data compression can be applied to the second (redundant) data component, while the first data component can be replaced by the replacement component or one of the replacement components, in particular based on a noise model.

[0019] Preferably, within the scope of the present invention, the preparation is carried out by: - replacing a data element by said replacement element or by at least one of said replacement elements and / or adding said replacement element or at least one further replacement element to the data to be transmitted. Includes.

[0020] Optionally, the determination and / or preparation of data is also carried out by: - generating defined check information, in particular reference bits and / or reference markers; - adding check information to the data, in particular by replacing at least one or more defined pixels of the data, preferably said replacement component or at least one of the replacement components then being added, preferably added, to the data; It is also possible that the above-mentioned items are included.

[0021] This allows the use of check information, for example in the form of at least one additional co-transmitted bit whose content is known in advance, in order to recognize transmission errors, in particular after removal of spurious noise. Furthermore, in addition to transmission errors, the method according to the invention also makes it possible to detect undesired intentional modifications in the transmission. Furthermore, for this purpose, a check of the data integrity is carried out: - reproducing the substituted component based on the substitution information; - processing the data with the reproduced substitution component, in particular including subtracting the substitution component from the data, preferably only in the check information; - checking for changes in the check information in the processed data; may include.

[0022] Furthermore, the execution of preparations, - introducing at least one watermark into the data, the watermark being also transmitted during the transmission; - introducing at least one metadata information into the data, the metadata information being also transmitted during transmission; It is advantageous to include at least one of the following:

[0023] Introducing a watermark into the data can have the advantage that the origin of the data can be traced. Furthermore, to the extent that pseudo-noise is applied to the data, the pseudo-noise may make the watermark invisible directly. Introducing metadata into the data can have the advantage that further processing steps (e.g. annotations visible in the image) or the data can be marked as invalid for a particular application (e.g. usable for training an algorithm but not usable for validating the algorithm).

[0024] In addition, the preparation is carried out - introducing at least one additional piece of information into the data, the additional piece of information being also transmitted during transmission; It is also possible that the above-mentioned items are included.

[0025] According to one possibility, the additional information can include reference markers or reference bits as check information, which may be processed based on the substitution information when performing a check on the data integrity, to detect tampering and / or errors in transmission. The additional information can further include additional data, for example facilitating assignment to data captured at the same time on the same vehicle (for example information on the vehicle registration number and / or time stamp). It is also possible with the additional information to introduce field data into the data to be transmitted. This can be for example the temperature of the image sensor or the age of the image sensor. Furthermore, a continuous counter can also be introduced as additional information, for example to detect transmission gaps or failures in a data source such as an image sensor.

[0026] A subject of the invention is likewise a computer program, in particular a computer program product, comprising instructions which, when the computer program is executed by a computer, cause the computer to carry out the method according to the invention. The computer program according to the invention therefore offers the same advantages as those detailed with reference to the method according to the invention.

[0027] A further subject of the invention is a data processing device for carrying out the method according to the invention. Thus, for example, the data processing device for executing a computer program can be provided as a computer. The computer can comprise at least one processor for executing the computer program. A non-volatile data memory can also be provided, in which the computer program can be stored and from which it can be read by the processor for execution. The device according to the invention can also comprise several processors and / or be designed as a computer system. For example, the device according to the invention can include a central control device of the vehicle and / or one or more distributed zone control devices of the vehicle. The device according to the invention can also optionally represent the entire vehicle electronics.

[0028] A computer-readable storage medium containing a computer program according to the invention may also be a subject of the invention. The storage medium may be configured, for example, as a data memory such as a hard disk and / or a non-volatile memory and / or a memory card. The storage medium may, for example, be integrated into the computer.

[0029] Additionally, the methods according to the present invention may be realized as computer-implemented methods. Further advantages, features and details of the invention will become apparent from the following description, in which exemplary embodiments of the invention are described in detail with reference to the drawings, in which each of the features mentioned in the claims and in this specification may be essential to the invention individually or in any combination. [Brief description of the drawings]

[0030] [Figure 1] FIG. 2 is a schematic diagram for illustrating the method according to the invention. [Diagram 2] FIG. 2 is a schematic diagram including further details to illustrate the method according to the invention. [Diagram 3] FIG. 4 is a further schematic diagram including further exemplary details to illustrate the method according to the invention; DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0031] In the following figures, the same reference numbers are used for the same technical features in different exemplary embodiments. In Fig. 1, a method 100 according to the invention for checking data integrity during a transmission 130 of data 210 in a vehicle 1 is shown. Here, according to a first method step, a determination 101 of the data 210 in the vehicle 1 is performed. For this, the data 210 is captured, for example, by an image sensor 10 and then transmitted to a distributed control device 50, in particular to a device 50 according to the invention. Then, according to a further method step, a preparation 110 for the transmission 130 of the determined data 210 is performed, in which an artificially generated and reproducible replacement component 230 is defined as an approximation to the data component 220 of the data 210 by means of replacement information 231. Then, a transmission 130 of the data 210 can be performed. After the transmission, a check of data integrity is performed on the transmitted data 210 based on the replacement information 231. Here, a preparation 110 can be optionally performed, in which the data 210 is prepared for a data compression 120, in which the data component 220 of the data 210 is removed for this purpose.

[0032] In Fig. 2 it is shown that the defined check information 232 can be used to check the data integrity on the basis of the additional information 260. Here, the execution of the determination 101 and / or preparation 110 of the data 210 can include the generation and addition 501 of the check information 232 to the data 210, in particular by replacing at least one or more defined pixels of the data 210. The check information 232 can thus include at least one reference marker 480 and / or an additional bit which replaces a corresponding pixel. The additional bit can have, for example, the value 0 and can be introduced at a specific position of the data 230. The definition and addition 502 of the replacement component 230 to the data 210 can be performed before the transmission. After the transmission 130, a reproduction 503 of the replacement component 230 based on the replacement information 231 can be provided. Subsequently, a processing 504 of the data 210 with the reproduced replacement component 230 can be performed, in particular by subtracting the replacement component 230 from the data 210, preferably only in the additional bit. A determination 505 can then be made as to whether there is a change in the check information 232 in the processed data 210 in order to perform a check of data integrity. This is possible, for example, by evaluation of a checksum of the check information 232.

[0033] Optionally, at least one watermark 250 and / or metadata information 440 may be introduced into the data 210 prior to transmission 130. Additionally, data compression 120 and decompression 150 of the data 210 may also occur before or after transmission 130.

[0034] In Fig. 3 the steps of the method 100 according to the invention for providing data 210 are shown in more detail. As an example an image sensor 10 is shown, which may include a chip with defined resolution, frame rate and noise characteristics. Here in Fig. 3 the image sensor 10 is also representative of a number of image sensors 10 of a vehicle. Digital images determined by such an image sensor 10 usually contain a high level of entropy, which can be mainly attributed to sensor noise. The presence of this noise is an important aspect that gives the image its natural statistical properties. The removal of this noise may cause processing algorithms applied to the image, for example in the framework of further processing 170, to provide different results than in the case of an image still containing this noise. The data 210 will therefore be corrupted. However, the presence of noise significantly limits the data reduction achievable by lossless compression.

[0035] It will be explained in more detail below how the use of substitution component 230 allows higher compression ratios to be achieved while maintaining a realistic noise profile and avoiding corruption of the content.

[0036] The image sensor 10 may be part of the vehicle 1 and may perform the capture 140 in the environment 3 of the vehicle 1 or on the vehicle 1 itself. The data 210 may be determined based on the capture 140 and may for example be sensor data, for example video data, output by the image sensor 10. The capture 140 may include content related to vehicle functions, in particular recording of objects in the environment 3 of the vehicle 1. Furthermore, the processing 170 of the data 210 may enable the realization of vehicle functions.

[0037] According to a first method step, a determination 101 of data 210 in the vehicle 1 is performed. Here, the data can be temporarily stored, for example after capture 140, in order to transmit the data at a later time in the presence of a data connection 2. For this, it is possible to repeatedly detect whether the data connection 2 is available and then start the method step. For the transmission 130, a preparation 110 of the determined data 210 can be performed, in which a data component 220 of the data 210 is removed and an artificially generated and reproducible replacement component 230 is defined as an approximation to the removed data component 220 by means of replacement information 231, providing the data 210 for one particularly lossless data compression 120. Here, after the removal of the data component 220, the data 210 can still include a remaining component 240 that is particularly suitable for the lossless data compression 120. The removed data component 220 can also be called the first data component 220 and the remaining component 240 can also be called the second data component 240.

[0038] The preparation 110 step can be at least partially performed by the generator 20. Furthermore, in this step, an optional addition of further information to the data 210 can be performed, for example additional information 260 and / or a watermark 250. Then, a data compression 120 of the prepared data 210 can be performed and a transmission 130 of the data 211 compressed by the data compression 120 can be initiated and / or performed via the data connection 2. Here, the removed data component 220 is not transmitted, and instead of the data component 220, a substitution information 231 is transmitted together with the remaining components 240. Here, the removed data component 220 can be a noise component 220 of the data 210 and the substitution component 230 can be an artificially generated noise 230, in particular a pseudo-noise 230.

[0039] The substitution component 230 can be defined during preparation 110 by the specification of substitution information 231, in particular a seed key for the generator 20 or the random number generator 20. The substitution information 231 then allows the generation and thus reproduction of the substitution component 230, in particular after the transmission 130 and decompression 150 of the data 210. With regard to the definition and / or generation 160 of the substitution component 230, it can also be envisaged that the substitution component 230 is generated in the form of pseudo-noise 230 by use of the generator 20. To enable a bit-identical recovery of the substitution component 230, the generator 20 can be configured with defined initial conditions, in particular depending on a target noise model (called noise model for short). The initial conditions can be specified and transmitted by the substitution information 231.

[0040] Furthermore, FIG. 3 shows a computer program 40 according to the invention for carrying out the method steps and a data processing device 50 according to the invention. Removal of data components 220 may include removing most of the noise from data 210, particularly image data 210, for example by noise reduction, possibly correcting for sensor-specific noise, fixed pattern noise, or non-uniform photosensitivity, etc. After this step, prepared data 210 is obtained, which may also be referred to as noise-reduced data 210.

[0041] Optionally, the generated pseudo-noise 230 can be added at a later point to the noise reduced data 210, particularly the image data 210, such that the resulting pseudo-noise image closely mimics a desired noise model, which can be suitable to mimic the respective image sensor 10.

[0042] The prepared data 210 can be transmitted losslessly compressed. Here, the data 210 can optionally include, in addition to the data content, a noise model with at least one corresponding parameter (i.e., in particular the substitution information 231 or a seed key), as well as preferably metadata and / or further additional information 260. The at least one parameter can be stored in the data 210 itself, or in the further data, or in a separate file, for example using a steganographic key. A lossless compression, for example 5-10 times, can be performed, preferably using a lossless codec defined in the JPEG2000 standard or user-defined. Examples are lossless JPEG compression or PNG compression, or ZIP compression. The at least one parameter of the pseudo-noise can optionally be stored together with the compressed data 210. The decompression 150 can be performed by first decompressing the data 210 with the same lossless codec, and then generating and adding the pseudo-noise to the data 210 based on the at least one parameter.

[0043] Exemplary variants of the method steps according to the invention are described in more detail below, where the determined data 210 are the respective values ​​x i The data 210 may then be realised as image data 210 comprising a number of pixels i having a first data component 220, i.e. a noise component 220, and a remaining second data component 240, which comprises some redundant information. This means that the two data components 220, 240 may be superimposed. The removal of the first data component 220 in the framework of the preparation 110 of the data 210 may be effected, for example, by noise reduction. For the noise reduction, conventional noise reduction techniques may be used. For this purpose, a noise model is usually utilized. The prepared data 210 may then only comprise the remaining component 240, and thus the noise reduced data 210. For example, a Poisson-Gaussian model may be used as the noise model, with the value x i The estimated standard deviation σi of pixel i with

[0044]

number

[0045] where the noise parameter for this model is a. These correlate specifically with the signal amplification at the image sensor 10. The black level of the image sensor 10 is given by x 0 Furthermore, b may represent a parameter related to the read noise of the image sensor 10. This noise model is preferably suitable for raw CCD and CMOS image data, but has a pixel value-independent standard deviation σ 0 A simplified model can also be used in which the noise is assumed to have: In this case, the number of noise bits per pixel i for integer-valued image data 210 is

[0046]

number

[0047] This number can be, for example, 6 to 8 bits. Then, by noise reduction techniques, the respective value x of pixel i can be calculated as i With respect to the noise reduction value y i For example, for each pixel i, we can determine a pseudorandom number R i A pseudorandom number generator 20 with a seed S is used for this purpose to generate the noise-reduced pixel values ​​y of the noise-reduced data 210, where S can be an integer. i can be calculated, for example, by the following formula:

[0048]

number

[0049] When generating the noise-reduced data 210 by the noise reduction technique, the first data component 220 is removed. Correspondingly, the first data component 220 may represent the difference between the original determined data 210 and the prepared noise-reduced data 210. Here, the first data component 220 may include the maximum component of the natural noise in the determined data 210.

[0050] After the removal of the data component 220, a replacement component 230 can be defined. The replacement component 230 can be a pseudo-noise 230, which should be as close as possible to the removed noise. The replacement component 230 can be generated based on replacement information 231, in this example a seed key. For this purpose, a target noise model can be utilized. In the simplest case, the seed key can be arbitrarily predefined with respect to this target noise model and stored persistently with respect to the method according to the invention. The definition of the replacement component 230 therefore does not require any additional calculation steps. Alternatively, the seed key can also be calculated based on the removed data component 220, for example using an optimization method for noise estimation in the removed data component 220. A seed key can then be identified such that the replacement component 230 is as close as possible to the removed data component 220. Furthermore, the seed key can also be defined based on the noise characteristics of the image sensor 10, such that the replacement component 230 generated therefrom is as close as possible to the removed data component 220. For this purpose, the seed key can also possibly be determined empirically or based on a model.

[0051] The remaining component 240 may then be compressed, in particular losslessly compressed, and the substitution information 23 may be transmitted together with the compressed remaining component 240 to the receiving side 30 . After transmission 130, the remaining components 240 can first be decompressed 150 to obtain the decompressed data 212. Then, based on the transmitted replacement information 231, e.g. pixel values ​​z i The pseudo-noise 230 can be reapplied to the remaining component 240 by the following calculation:

[0052]

number

[0053] Here, a noise model and its parameters are used, where the noise model is a functional form of the transformation, and the parameters are σ 0 and the exact value for q. i can be calculated by the generator 20, which now receives the transmitted permutation information 231 for random number generation. The pixel value z i The data 210 having the σ 2 σ 1 σ 2 σ 2 will be very close to the original determined data 210 and can then be transmitted to a further device 60 for further processing 170 .

[0054] The above description of the embodiments sets forth the invention in an exemplary context only: Naturally, in so far as it makes sense technically, the individual features of the embodiments can be freely combined with one another without departing from the scope of the invention. [Explanation of symbols]

[0055] 1 vehicle 3 Vehicle 1 environment 10 Image Sensor 20 Random Number Generator, Generator 23 Replacement Information 40 Computer Programs 50 Data processing device, device 60 Devices 100 ways 101 Decision 110 Preparation 120 Data Compression 130 Transmission 140 Capture 150 Thaw 160 Occurrence of substitution components 230 170 Further Processing 210 Data 212 Unzipped Data 220 data components, noise components 230 Substitution components, artificially generated noise, pseudo-noise, data 231 Replacement Information 232 Check Information 240 remaining components, second data components 250 Watermark 260 Additional Information 440 Metadata Information 480 Reference Marker 501 Adding check information 232 to data 210 502 Addition of replacement component 230 to data 210 503 Reproduction of substitution components 230 based on substitution information 231 504 Processing of Data 210 505 confirmed

Claims

1. A method (100) for checking data integrity when transmitting (130) data (210) in a vehicle (1), The steps include: (101) determining the data (210) in the vehicle (1), A step of performing preparation (110) for the transmission (130) of the determined data (210), wherein at least one artificially generated and reproducible substitution component (230) is defined by substitution information (231) as an approximation of the data component (220) of the data (210), The steps include: performing the transmission (130) of the data (210); The steps include performing the data integrity check on the transmitted data (210) based on the replacement information (231), Method (100) in which the following is performed automatically.

2. The preparation (110) is performed to prepare the data (210) for data compression (120), for which the data component (220) of the data (210) is removed, before the transmission (130), Steps to perform data compression (120) on the prepared data (210) The execution is performed. The transmitted data (210) is the data (210) compressed by the data compression (120), and when the compressed data (210) is transmitted (130), the replacement information (231) is transmitted in place of the removed data component (220). The method according to claim 1 (100).

3. The data component (220) is the noise component (220) of the data (210), the substitution component (230) is artificially generated noise (230), in particular pseudo-noise (230), the substitution component (230) is defined by the identification of the substitution information (231), in particular a seed key for the random number generator (20), and the substitution component (230) is reproduced bit by bit after the transmission (130) based on the substitution information (231). The method according to feature 2 (100).

4. The data (210) compressed by the data compression (120) is reproduced bit by bit after the transmission (130), and the data compression (120) is performed in the form of lossless data compression (120) for this purpose. The method according to claim 3 (100).

5. The data (210) in the form of image data (210) is determined by at least one image sensor (10) of the vehicle (1), and the substitution information (231) and / or the substitution component (230) is determined by determining the noise characteristics of the at least one image sensor (10) and / or performing a noise evaluation of the determined image data (210) for the preparation (110), and the substitution component (230) is defined as an approximation of the data component (220) in the form of pseudo-noise. The method according to claim 1 (100).

6. The execution of the above preparation (110) The steps of replacing the data component (220) with the replacement component (230) and / or adding the replacement component (230) to the transmitted data (210) The method according to claim 1 (100), characterized by including the following:

7. The execution of the determination (101) and / or preparation (110) of the data (210) The steps include generating defined check information (232), In particular, the step of adding the check information (232) to the data (210) by replacing at least one defined pixel of the data (210), Includes, The execution of the aforementioned data integrity check, A step of reproducing the substitution component (230) based on the substitution information (231), The steps include processing the data (210) with the reproduced substitution component (230), A step of checking for changes in the check information (232) within the processed data (210), The method according to claim 1 (100), characterized by including the following:

8. The execution of the above preparation (110) A step of introducing at least one watermark (250) into the data (210), wherein the watermark (250) is also transmitted during the transmission. A step of introducing at least one metadata information (440) into the data (210), wherein the metadata information (440) is also transmitted during the transmission. The method according to claim 1 (100), characterized by comprising at least one of the above.

9. The execution of the above preparation (110) A step of introducing at least one additional piece of information (260) into the data (210), wherein the additional piece of information (260) is also transmitted during the transmission. Includes, The additional information (260) includes a reference marker (480) as check information (232), and the reference marker (480) is processed based on the replacement information (231) when the data integrity check is performed, to detect tampering and / or errors during transmission (130). The method according to claim 1 (100).

10. A computer program (40) that includes an instruction to cause the computer to perform the method (100) according to any one of claims 1 to 9 when the computer executes the computer program (40).

11. A data processing device (50) configured to carry out the method (100) according to any one of claims 1 to 9.

Images