Method for identifying a manipulated control device of a bus system of a vehicle by a second control device of the bus system of the vehicle, computer-readable medium, system and vehicle

Abstract

The invention relates to a method for identifying a manipulated control device of a bus system of a vehicle by a second control device of the bus system of the vehicle, the method comprising: transmitting, by a transmitting unit of a first control device of the vehicle, a first message via the bus system; receiving, by a receiving unit or a transmitting / receiving unit of a second control device of the vehicle, the first message via the bus system; determining, by the second control device, a message type of the received first message; ascertaining, by the second control device of the vehicle, a reference message, the reference message having a message type corresponding to the determined message type of the first message; ascertaining a deviation of the first message from the reference message; and if the first message has a deviation from the reference message: identifying, by the second control device, the first control device as a manipulated control device; and providing, by the second control device, an alert message to a server external to the vehicle.

Description

Technical Field

[0001] This invention relates to a method for identifying a manipulated control device of a vehicle's bus system via a second control device of the vehicle's bus system. The invention also relates to a computer-readable medium for identifying a manipulated control device of a vehicle's bus system via a second control device of the vehicle's bus system, a system for identifying a manipulated control device of a vehicle's bus system via a second control device of the vehicle's bus system, and a vehicle including the system for identifying a manipulated control device of the vehicle's bus system via a second control device of the vehicle's bus system. Background Technology

[0002] The vehicle's control units are interconnected via a bus system. Through this system, the control units can exchange messages used to control vehicle functions. If a control unit sends a message on the bus system without authorization, it may unauthorizedly affect the functionality of other control units. Currently, there is no verification of the legitimacy of the sender of bus messages. Summary of the Invention

[0003] Therefore, the object of the present invention is to efficiently identify manipulated control devices on a vehicle's bus system. In particular, the object of the present invention is to efficiently identify the manipulated sender of a message on the bus system via another control device of the vehicle's bus system.

[0004] The objective is achieved through a method according to the invention for identifying a manipulated control device of a vehicle's bus system via a second control device of a vehicle's bus system, a computer-readable medium according to the invention for identifying a manipulated control device of a vehicle's bus system via a second control device of a vehicle's bus system, a system according to the invention for identifying a manipulated control device of a vehicle's bus system via a second control device of a vehicle's bus system, and a vehicle according to the invention.

[0005] According to a first aspect, the present invention is characterized by a method for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system. The method may be a computer-implemented method and / or a control device-implemented method.

[0006] The bus system can be a CAN bus. The vehicle can be a motor vehicle. The method includes: transmitting a first message via the bus system by a transmitting unit of a first control device of the vehicle; and receiving the first message via the bus system by a receiving unit or transmitting / receiving unit of a second control device of the vehicle. The method further includes: determining the message type of the received first message by the second control device; and identifying a reference message by the second control device of the vehicle, the reference message having a message type corresponding to the determined message type of the first message. The method further includes: identifying a deviation between the first message and the reference message. If there is a deviation between the first message and the reference message, the method involves the second control device identifying the first control device as a manipulated control device, and the second control device providing an alarm message to a server outside the vehicle.

[0007] Advantageously, the method can efficiently identify manipulated control devices. Messages from the bus system are received by the second control device and compared with a reference message for the second control device to determine whether the first control device is a licensed sender of the received message. If the first control device is an unlicensed or manipulated sender of the message on the bus system, the licensed sender of the message, i.e., the second control device, can be efficiently identified by means of the reference message. Manipulation of the vehicle's control devices can thus be quickly identified and communicated to a server outside the vehicle.

[0008] According to an advantageous embodiment of the invention, the reference message may be the last successfully transmitted message from the second control device, which has the message type of the received first message. This allows for efficient identification of the reference message.

[0009] According to another advantageous embodiment of the invention, the reference message may be a message for which the second control device is the only reliable message source on the bus system. This allows the second control device to efficiently identify the manipulated control device.

[0010] According to another advantageous embodiment of the invention, the reference message can be transmitted via a bus system before the second control device receives the first message, and the reference message is stored on the second control device after successful transmission. Thus, the second control device can efficiently identify the reference message.

[0011] According to another advantageous design, the method may further include: if the first message corresponds to a reference message, the second control device discards the first message. Thus, the second control device can filter messages sent by itself and received via the bus system.

[0012] According to another advantageous design, the second control device can be the gateway control device of the bus system. This allows the second control device to efficiently monitor multiple messages from other control devices in the bus system and quickly identify the manipulated control device.

[0013] According to another advantageous design, the bus system can be a CAN bus.

[0014] According to another aspect, the present invention is characterized by a computer-readable medium for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system, wherein the computer-readable medium includes instructions that, when executed by the vehicle's control device, implement the method described above.

[0015] According to another aspect, the present invention is characterized by a system for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system, wherein the system is configured to implement the method described above.

[0016] According to another aspect, the present invention is characterized by a vehicle comprising the aforementioned system for identifying the manipulated control device of the vehicle's bus system via a second control device of the vehicle's bus system.

[0017] Further features of the invention arise from the accompanying drawings and the description thereof. All features and combinations thereof previously described in the specification, as well as those mentioned below in the description of the drawings and / or shown separately in the drawings, may be applied not only in their respective proposed combinations, but also in other combinations or individually. Attached Figure Description

[0018] Preferred embodiments of the invention are described below with reference to the accompanying drawings. Further details, preferred designs, and improvements of the invention will then emerge. The drawings schematically illustrate:

[0019] Figure 1 An exemplary method is shown for identifying manipulated control devices of a vehicle's bus system; and

[0020] Figure 2 An exemplary system is shown for identifying the manipulated control device of a vehicle's bus system. Detailed Implementation

[0021] Figure 1An exemplary method 100 for identifying a manipulated control device of a vehicle's bus system via a second control device of the vehicle's bus system is shown in detail. Preferably, there is only one control device in the vehicle's bus system, hereinafter referred to as the second control device, which may be the authorized sender of messages on the bus system—hereinafter also referred to as reference messages.

[0022] Method 100 may involve transmitting a first message 102 via a bus system from a transmitting unit of a first control device of the vehicle. The first control device may be an manipulated control device. The first message may, for example, include an instruction to adjust the vehicle's speed limit to a value not authorized by the vehicle manufacturer.

[0023] Method 100 allows the receiving unit or transmitting / receiving unit of the vehicle's second control device to receive the first message 104 via a bus system. Furthermore, method 100 allows the second control device to determine the message type of the first message received 106. The message type could, for example, be an adjustment of the vehicle speed limit.

[0024] Method 100 may involve a second control device of the vehicle determining a reference message 108, wherein the reference message has a message type corresponding to the determined message type of the first message. The reference message may be the last successfully transmitted message by the second control device, having the message type of the received first message. Alternatively or additionally, the reference message may be a message for which the second control device is the only reliable source of information on the bus system. Alternatively or additionally, the reference message may be transmitted via the bus system before being received by the second control device from the first message, and may be stored on the second control device after successful transmission. If the message type is, for example, adjusting a vehicle speed limit, the second control device can determine the corresponding reference message based on the message type. For example, the second control device may transmit a message with the message type "adjusting a vehicle speed limit" when first configuring the second control device to set the vehicle speed limit at a value pre-given by the vehicle manufacturer. After successfully transmitting the message with the message type "adjusting a vehicle speed limit," the second control device may store the message. The stored messages are ultimately used as reference messages to identify manipulated control devices that attempt to send unauthorized messages on the bus system with message type adjusting vehicle speed limits.

[0025] Method 100 can determine the deviation between the first message and the reference message. For example, the method can compare the speed limit value of the first message with the speed limit value of the reference message to determine the deviation. If there is a deviation between the first message and the reference message, method 100 can identify the first control device 112 as the manipulated control device by the second control device, and the second control device can provide an alarm message 114 to a server outside the vehicle.

[0026] Figure 2 An exemplary system 200 for identifying a manipulated control device 202 of a vehicle's bus system 204 via a second control device 206 is shown in detail. The first control device or manipulated control device 202 can transmit a first message 208 of a first message type via the bus system 204 from a transmitting unit of the first control device 202 of the vehicle. The second control device 206 can receive the first message 208 of the first message type via the bus system 204 through a receiving unit or transmitting / receiving unit of the second control device 206 of the vehicle. Preferably, the receiving unit 210 or transmitting / receiving unit of the second control device may include a component 210 for identifying the manipulated control device. The second control device 206, and in particular the component 210 of the second control device 206, can determine the message type of the received first message 208. The second control device 206, and in particular the component 210 of the second control device 206, can determine a reference message having a message type corresponding to the determined message type of the first message. For example, component 210 can query a reference message from memory 212, which has stored the last successfully transmitted message 214 of the same message type. The second control device 206, particularly component 210 of the second control device 206, can determine the deviation between the first message and the reference message, and if there is a deviation, then: the first control device is identified as a manipulated control device, and an alarm message 216 is provided to a server outside the vehicle.

[0027] Advantageously, the second control device can act as an authorized sender of messages to monitor the bus system for unauthorized messages from manipulated control devices. For messages where only one authorized sender exists on the bus system, that sender, such as the second control device, can trigger an alarm by recognizing an unauthorized message from a manipulated control device if that authorized sender itself has not yet sent the message. This allows for efficient identification and reporting of manipulated control devices.

[0028] List of reference numerals

[0029] 100 methods

[0030] 102 The first message is sent by the first control device.

[0031] 104 receives the first message from the second control device.

[0032] 106 Determine the message type

[0033] 108 Confirmed Reference News

[0034] 110 determines the deviation between the first message and the reference message.

[0035] 112 identifies the first control device as the manipulated control device.

[0036] 114 provides alarm messages

[0037] 200 system

[0038] 202 First control device / manipulated control device

[0039] 204 bus system

[0040] 206 Second Control Device

[0041] 208 First News

[0042] 210 Components for identifying manipulated control devices

[0043] 212 memory

[0044] 214 Reference News

[0045] 216 Alert Message

Claims

1. A method for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system, the method comprising: The first message is sent by the transmitting unit of the vehicle's first control device via the bus system; The first message is received by the receiving unit or transmitting / receiving unit of the vehicle's second control device via the bus system; The message type of the received first message is determined by the second control device; The second control unit of the vehicle identifies a reference message having a message type corresponding to the determined message type of the first message, wherein the reference message is the last successfully transmitted message of the second control unit, the last successfully transmitted message having the message type of the received first message, and the reference message is such that the second control unit is the only reliable message source on the bus system for this message. Investigate the discrepancy between the primary report and the reference report; and If the first message differs from the reference message, then: - The second control device identifies the first control device as the manipulated control device; and - An alarm message is sent from the second control unit to a server outside the vehicle.

2. The method according to claim 1, wherein, The reference message is sent via the bus system before the second control device receives the first message, and is stored on the second control device after successful transmission.

3. The method according to claim 1 or 2, further comprising: If the first message corresponds to the reference message, the second control device discards the first message.

4. The method according to claim 1 or 2, wherein, The second control device is the gateway control device of the bus system.

5. The method according to claim 1 or 2, wherein, The bus system is the CAN bus.

6. A computer-readable medium for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system, wherein, The computer-readable medium includes instructions that, when executed by the vehicle's control device, implement the method according to any one of claims 1 to 5.

7. A system for identifying a controlled device of a vehicle's bus system via a second control device of the vehicle's bus system, wherein, The system is configured to implement the method according to any one of claims 1 to 5.

8. A vehicle comprising a system for identifying a controlled device of the vehicle’s bus system via a second control device according to claim 7.

Images