SECURE WIRELESS NETWORK FOR VEHICLE SENSORS

Abstract

A method for operating an electronic vehicle control unit (104) using sensor-specific configuration data (116) is disclosed. The electronic vehicle control unit comprises an ECU ultra-wideband transceiver (112) for establishing a sensor-specific data communication channel (107) with one or more sensor units (106, 300). The sensor-specific configuration data includes sensor position data (118) that describes the sensor position relative to the ECU ultra-wideband transceiver.The static sensor-specific configuration data includes a cached security key paired with the sensor location data, the procedure comprising: establishing (200) the sensor-specific data communication channel using the sensor location data and the cached security key; repeatedly (202) measuring time-of-flight data (120); and detecting (204) a security breach by comparing the time-of-flight data with the sensor location data; initiating (206) a security protocol (122) when the security breach is detected.

Description

AREA OF TECHNOLOGY

[0001] The invention relates to the field of vehicle sensor technology, in particular the networking of sensors. STATE OF THE ART

[0002] Vehicles are becoming increasingly complex and contain a greater number and variety of sensors. For example, cameras, ultrasonic sensors, radar, and lidar are frequently integrated into vehicles. SUMMARY

[0003] The invention relates to an electronic vehicle control unit (ECU), a vehicle network, a vehicle, a method, and a computer program, as described in the independent claims. Detailed embodiments are disclosed in the dependent claims.

[0004] An electronic vehicle control unit (ECU) is disclosed. The ECU includes a memory in which machine-executable instructions and sensor-specific configuration data are stored. The ECU further includes an ultra-wideband (UWB) transceiver configured to establish a sensor-specific data communication channel with one or more sensor units. The sensor-specific configuration data includes sensor position data describing the sensor's position relative to the UWB transceiver. The sensor-specific configuration data also includes a cached security key paired with the sensor location data.

[0005] The electronic vehicle control unit also includes a computing system. Executing the machine-executable instructions causes the computing system to establish the sensor-specific data communication channel using the sensor location data and the cached security key. Executing the machine-executable instructions further causes the computing system to detect a security breach by comparing the flight time data with the sensor location data. Executing the machine-executable instructions further causes the computing system to initiate a security protocol if the security breach is detected.

[0006] In another aspect, a vehicle network is revealed that includes the electronic vehicle control unit and one or more sensor units.

[0007] In another aspect, a vehicle network is revealed that includes the vehicle.

[0008] In another aspect, a method for operating an electronic vehicle control unit using sensor-specific configuration data is disclosed.

[0009] In another aspect, a computer program is disclosed that includes machine-executable instructions configured to implement the procedure. It is understood that one or more of the aforementioned examples may be combined, provided that the combined examples are not mutually exclusive. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] The following examples describe in more detail with reference to the drawings, whereby: Fig. 1. An example of a vehicle with a vehicle network illustrates, Fig. 2 is a block diagram showing a procedure for operating an electronic vehicle control unit, Fig. 3 illustrates an implementation of a vehicle network, Fig. 4 illustrates a truck with a vehicle network, Fig. Figure 5 illustrates the use of an ultra-wideband repeater in a vehicle network. DETAILED DESCRIPTION

[0011] In the following, similar elements are marked with the same reference symbols.

[0012] In one example, an electronic vehicle control unit (ECU) includes a memory that stores machine-executable instructions and sensor-specific configuration data. The ECU further includes an ultra-wideband transceiver configured to establish a sensor-specific data communication channel with one or more sensor units. The sensor-specific configuration data includes sensor position data, which describes a sensor's position relative to the ECU's ultra-wideband transceiver. This configuration data also includes a cached security key that is paired with the sensor location data. The sensor-specific data communication channel can exist between a specific sensor and one or more sensor units.Since the position of a sensor mounted on a car or vehicle relative to the ECU ultra-wideband transceiver is fixed, the sensor location data can be static. Linking the security key to the sensor location data can provide greater security for the sensor-specific data communication channel.

[0013] The electronic vehicle control unit also includes a computing system. Executing the machine-executable instructions causes the computing system to establish the sensor-specific data communication channel using the sensor location data and the cached security key. Instead of generating a security key or determining the sensor location data, this information is already stored in memory. Executing the machine-executable instructions also causes the computing system to repeatedly measure flight time data that describes the sensor-specific communication channel. Executing the machine-executable instructions further causes the computing system to detect a security breach by comparing the flight time data with the sensor location data.Executing the machine-executable instructions further causes the computer system to initiate a security protocol if a security breach is detected. For example, greater security can be achieved in sensor-specific data communication channels by using the cached security key in conjunction with the sensor location data. It can be detected if the cached security key has been compromised because the flight time data might not match the sensor location data. This can, for example, provide improved security in the sensor-specific data communication channel and greater protection, as there is a lower probability that one or more sensors could be compromised and the data sent to the ECU ultra-wideband transceiver could be falsified.

[0014] In another example, the security protocol includes one of the following procedures: discarding the sensor-specific communication channel, executing a physical-layer security program, regenerating the cached security key, and combinations thereof. These various examples can provide a means of effectively handling the security breach when it is detected.

[0015] In another example, the sensor-specific data communication channel conforms to the IEEE 802.15.4 standard. This can be advantageous because it can provide an effective means of implementing the sensor-specific data communication channel securely.

[0016] In another example, a vehicle network includes the electronic vehicle control unit and one or more sensor units.

[0017] In another example, the sensor-specific data communication channel is set up with the electronic vehicle control unit as the master station and one or more sensor units as slave stations. This can be advantageous, for example, because they can be pre-configured in this way and can further increase the system's safety.

[0018] In another example, the one or more sensor units include a sensor memory in which sensor-specific security keys for the sensor-specific data communication channel are stored. In this example, the security keys for the individual sensors are pre-stored or cached. This can provide even greater security, as the security keys for the sensors and also for the electronic vehicle control unit are pre-configured and stored locally. This further reduces the risk of the vehicle network being hacked.

[0019] In another example, the one or more sensor units are multi-sensor units. Executing the machine-executable instructions further causes the computer system to synchronize the operation of the multiple sensor units using the sensor-specific data communication channel for the multiple sensor units. Various vehicle sensor units, such as radar systems, may rely on highly accurate synchronization between the different sensors. Using the vehicle network to accomplish this task can enable extremely well-synchronized sensors without the need for a wired connection.

[0020] In another example, the multiple sensor units comprise several radar systems. This can be particularly advantageous because the operation of the multiple radar systems must be synchronized to prevent interference. Using the vehicle's network can provide a way to synchronize multiple radar systems without requiring a wired connection.

[0021] In another example, executing the machine-executable instructions further causes the computer system to repeatedly receive radar data from at least one of the multiple radar systems. Executing the machine-executable instructions further causes the computer system to repeatedly detect an interference state in the radar data. This interference state could, for example, be data corrupted by the reception of radar signals from other vehicles. Executing the machine-executable instructions further causes the computer system, in response to the detection of the interference state, to repeatedly send control commands to the multiple radar systems to change the operating mode. These control commands to change the operating mode can represent various types of changes that can be made to the operation of the radar systems.For example, you can modify the timing, bandwidth, or sequence in which the various radar systems operate. These minor changes can, for instance, ensure that the radar system functions correctly when located near other vehicles' radar systems. Furthermore, executing the machine-executable instructions causes the computer system to repeatedly synchronize the operation of the multiple radar systems using the sensor-specific data communication channel after the operating mode control commands have been sent to them. As mentioned earlier, the operation of multiple radar systems in a vehicle can be sensitive to timing. Using the vehicle's network to perform the synchronization can enable the radar systems to function correctly after a change in the control mode has been requested.

[0022] In another example, the multiple radar systems are configured to operate cooperatively when synchronized via the sensor-specific data communication channel. For instance, a group of multiple radar detectors can be used to operate cooperatively and perform other tasks such as beamforming or other more complex radar techniques. In yet another example, the vehicle network also includes an ultra-wideband repeater configured to provide the sensor-specific data communication channel between the ECU's ultra-wideband transceiver and at least one of the one or more sensor units. This can be particularly advantageous in larger vehicles such as trucks, where the distance between the ECU and the sensor may exceed 10 meters. The use of the ultra-wideband repeater can, for example, enable the safety and synchronization improvements described above.

[0023] In another example, a vehicle incorporates the vehicle network as described above. A vehicle incorporating the vehicle network can be advantageous because it can enable improved safety and also the synchronization of sensors such as radar systems.

[0024] In another example, a method for operating an electronic vehicle control unit (ECU) is disclosed. The method can utilize sensor-specific configuration data. The ECU comprises an ultra-wideband transceiver configured to establish a sensor-specific data communication channel with one or more sensor units. The sensor-specific configuration data includes sensor location data describing the sensor's location relative to the ECU's ultra-wideband transceiver. The sensor-specific configuration data also includes a cached security key paired with the sensor location data. The method comprises establishing the sensor-specific data communication channel using the sensor location data and the cached security key.The method further includes the repeated measurement of flight-time data describing the sensor-specific data communication channel. The method further includes the detection of a security breach by comparing the flight-time data with the sensor location data. The method further includes the initiation of a security protocol when the security breach is detected.

[0025] In another example, a computer program comprises machine-executable instructions configured to implement the procedure. These can be stored, for example, in a non-transitory storage medium.

[0026] Fig. Figure 1 shows an example of a vehicle 100 that includes a vehicle network 102. The vehicle network 102 includes an electronic vehicle control unit 104 and several radar systems 106. The vehicle network 102 establishes sensor-specific data communication channels 107 between each radar system 106 and the electronic vehicle control unit 104. The electronic vehicle control unit 104 includes a computing system 108 that communicates with a memory 110 and an ECU ultra-wideband transceiver 112.

[0027] Memory 110 is intended to represent various memory types that the computer system 108 can access. Memory 110 is represented as containing machine-executable instructions 114 that enable the computer system 108 to perform various tasks, such as controlling other components of the electronic vehicle control unit 104 and also executing various data and communication tasks. Memory 110 is further provided with sensor-specific configuration data 116. This data contains information used to establish the sensor-specific data communication channel 107 with each of the radar systems 106. The sensor-specific configuration data 116 can, for example, contain the cached security key in conjunction with the sensor location data for each of the sensors 106.Memory 110 contains the sensor location data 118 for one of the sensors 106 and can compare this data with the flight time data 120 for the same sensor. If a discrepancy is detected between the sensor location data 118 and the flight time data 120, a security protocol 122 can be triggered. This can, for example, lead to the rejection of the specific sensor-specific data communication channel 107 and the execution of various security tasks such as the regeneration of security keys and the restoration of communication.

[0028] Memory 110 is also depicted as optionally containing radar data 124 received from one of the radar systems. If the radar data 124 is analyzed and a detected interference condition 126 is found, for example, data that may be corrupted by the presence of radar signals from other vehicles, then the computer system 108 uses the ECU ultra-wideband transceiver 112 to transmit various control commands 128 to the different radar systems 106 via the sensor-specific data communication channel 107 to change the operating mode. The computer system 108 then also controls the ECU ultra-wideband transceiver 112 to synchronize the radar systems 106 via the sensor-specific data communication channel 107.

[0029] Fig. Figure 2 shows a flowchart illustrating a procedure for operating the electronic vehicle control unit 104. In step 200, the sensor-specific data communication channel 107 is established using the sensor location data 118 and the cached security key. In step 202, the flight time data 120 are repeatedly measured. In step 204, the security breach is detected by comparing the flight time data 120 with the sensor location data 118. In step 206, the security protocol 122 is initiated when the security breach is detected.

[0030] Fig. Figure 3 shows an alternative implementation of the vehicle network 102. The vehicle network consists of the electronic vehicle control unit 104 with the ECU ultra-wideband transceiver 112. There are several sensors 300, each with a sensor ultra-wideband transceiver 302. The sensor ultra-wideband transceivers 302 and the ECU ultra-wideband transceiver 112 form individual sensor-specific data communication channels 107. In addition, the sensors can also form sensor-internal data communication channels 304 among themselves. In this example, the electronic vehicle control unit 104 also acts as a power supply and enables two-wire power connections 306 to the sensors 300. Although these are two-wire power connections 306, the weight and space requirements are significantly less than when using individual wired data communication cables. The in Fig. The example shown in Figure 3 can therefore reduce the vehicle weight by using the sensor-specific data communication channels 107 and enable the aforementioned advantages of synchronization and data security.

[0031] Fig. Figure 4 shows an example of a truck comprising the vehicle network 102. There is an electronic vehicle control unit 104 that communicates with a number of sensors 300 via sensor-specific data communication channels 107. Some of the sensors 300 also have optional, sensor-internal data communication channels 304. In this example, all sensors are shown as communicating directly with the electronic vehicle control unit 104. However, in some cases, the sensors 300 of the truck 400 may be located more than 10 meters away from the electronic vehicle control unit 104. In this case, an ultra-wideband repeater could be used.

[0032] Fig.Figure 5 shows how an ultra-wideband repeater 500 could be implemented in the vehicle network 102. The ultra-wideband repeater 500 serves to repeat messages and is used to establish the sensor-specific data communication channel 107. For example, if the sensor 300 attempts to send a message to the control unit 104, it first sends a sensor-to-ECU message 502 from the sensor to the UWB repeater 500. The UWB repeater then forwards the sensor-to-ECU message 504 to the control unit 104. If the control unit 104 attempts to send a message to the sensor 300, it first sends the ECU-to-sensor message 506 to the UWB repeater 500. The UWB repeater 500 then forwards the ECU-to-sensor message to the sensor 300. This enables two-way communication and forms the sensor-specific data communication channel 107.The optional UWB repeater 500 can, for example, store flight time data for the sensor and append it to the ECU-to-sensor message 502. The electronic control unit 104 could then, for example, measure the flight time data for messages 502 and 504 and compare it with the location. This can be used, for example, to detect security flaws or breaches. Likewise, the electronic control unit 104 can use the UWB repeater 500 to synchronize the various sensors. This can, for example, enable the synchronization of radar systems.

[0033] Although the invention is illustrated and described in detail in the drawings and the foregoing description, this illustration and description is to be regarded as illustrative or exemplary and not limiting; the invention is not limited to the disclosed examples.

[0034] As those skilled in the art will understand, aspects of the present invention can be embodied in the form of a device, a method, or a computer program product. Accordingly, aspects of the present invention can take the form of a purely hardware variant, a purely software variant (including firmware, resident software, microcode, etc.), or a variant that combines software and hardware aspects, which may be generally referred to here as a "circuit," "module," or "system." Furthermore, aspects of the present invention can take the form of a computer program product embodied in one or more computer-readable media containing computer-executable code.

[0035] Any combination of one or more computer-readable media can be used. The computer-readable medium can be a computer-readable signaling medium or a computer-readable storage medium. A "computer-readable storage medium," as used here, includes any tangible storage medium capable of storing instructions executable by a processor or computing system of a computer device. The computer-readable storage medium may be referred to as a computer-readable non-transitory storage medium. The computer-readable storage medium may also be referred to as a physical computer-readable medium. In some embodiments, a computer-readable storage medium may also be capable of storing data accessible to the computing system of the computer device.Examples of computer-readable storage media include: a floppy disk, a magnetic hard disk drive, a solid-state drive, flash memory, a USB flash drive, random access memory (RAM), read-only memory (ROM), an optical disk, a magneto-optical disk, and the computer system's register file. Examples of optical disks are compact discs (CDs) and digital versatile disks (DVDs), such as CD-ROM, CD-RW, CD-R, DVD-ROM, DVD-RW, or DVD-R discs. The term "computer-readable storage medium" also refers to various types of recording media that the computer can access via a network or communication connection. For example, data can be retrieved via a modem, the internet, or a local area network.Computer-executable code embodied on a computer-readable medium may be transmitted via any suitable medium, including but not limited to wireless, wired, fiber optic cables, RF, etc., or a suitable combination of the aforementioned media.

[0036] A computer-readable signal medium can contain a disseminated data signal with computer-executable code embodied therein, for example, in the baseband or as part of a carrier wave. Such a transmitted signal can take any form, including, but not limited to, electromagnetic or optical signals, or a suitable combination thereof. A computer-readable signal medium can be any computer-readable medium that is not a computer-readable storage medium and that can transmit, disseminate, or transport a program for use by or in conjunction with a command-execution system, apparatus, or device.

[0037] "Computer memory" or "memory" is an example of a computer-readable storage medium. Computer memory is any memory that a computing system can directly access. "Computer memory" or "memory" is another example of a computer-readable storage medium. Computer memory is any non-volatile, computer-readable storage medium. In some embodiments, computer memory can also be computer memory, or vice versa.

[0038] A “computing system,” as used here, comprises an electronic component capable of executing a program, a machine-executable instruction, or computer-executable code. References to the computing system encompassed by the example “a computing system” should be interpreted to mean that it may contain more than one computing system or processing core. The computing system may, for example, be a multi-core processor. A computing system may also refer to a collection of computing systems within a single computer system or distributed across multiple computer systems. The term “computing system” should also be interpreted to mean that it may refer to a collection or network of computing devices, each comprising a processor or computing systems.The machine-executable code or machine-executable instructions can be executed by multiple computing systems or processors, which may be located within the same computing system or even distributed across multiple computing systems.

[0039] Machine-executable instructions or computer-executable code may comprise instructions or a program that instructs a processor or other computing system to execute an aspect of the present invention. Computer-executable code for performing operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object-oriented programming language such as Java, Smalltalk, C++, or the like, and conventional procedural programming languages ​​such as the programming language "C" or similar programming languages, and compiled into machine-executable instructions. In some cases, the computer-executable code may be in the form of a high-level language or in pre-compiled form and used in conjunction with an interpreter that generates the machine-executable instructions on the fly.In other cases, the machine-executable instructions or computer-executable code may be in the form of programming for programmable logic gate arrays.

[0040] The computer-executable code can run entirely on the user's computer, partially on the user's computer as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on the remote computer or server. In the latter case, the remote computer can be connected to the user's computer via any network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (e.g., via the internet using an internet service provider).

[0041] Aspects of the present invention are described with reference to flowchart illustrations and / or block diagrams of processes, devices (systems), and computer program products according to embodiments of the invention. It is understood that each block or part of the blocks of the flowchart, illustrations, and / or block diagrams can optionally be implemented by computer program instructions in the form of computer-executable code. It is further understood that combinations of blocks in different flowcharts, illustrations, and / or block diagrams can be combined, provided they are not mutually exclusive.These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, or other programmable data processing device to create a device such that the instructions executed through the processor of the computer or other programmable data processing device generate means for performing the functions / steps specified in the block or blocks of the flowcharts or schematic representations.

[0042] These machine-executable instructions or computer program instructions may also be stored in a computer-readable medium capable of instructing a computer, other programmable data processing device, or other apparatus to operate in a particular manner, such that the instructions stored in the computer-readable medium produce a manufactured item containing instructions that implement the function / action specified in the flowchart and / or block diagram block or blocks.

[0043] The machine-executable instructions or computer program instructions can also be loaded onto a computer, other programmable data processing device, or other apparatus to initiate a series of operational steps performed on the computer, other programmable device, or other apparatus to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device enable processes to implement the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0044] A "user interface," as used here, is an interface that allows a user or operator to interact with a computer or computer system. A "user interface" can also be called a "human interface device." A user interface can provide information or data to the operator and / or receive information or data from the operator. A user interface can allow an operator's input to be received by the computer and can provide the computer's output to the user. In other words, the user interface can allow an operator to control or manipulate a computer, and the interface can allow the computer to display the effects of the operator's control or manipulation.Displaying data or information on a screen or graphical user interface is an example of providing information to an operator. Receiving data via a keyboard, mouse, trackball, touchpad, pointer, graphics tablet, joystick, gamepad, webcam, headset, pedals, wired glove, remote control, and accelerometer are all examples of user interface components that enable the reception of information or data from an operator.

[0045] Several examples can possibly be described by one or more of the following characteristics in the numbered sections below: Clause 1. An electronic vehicle control unit, comprising: - a memory that stores machine-executable instructions and sensor-specific configuration data; - an ECU ultra-wideband transceiver configured to form a sensor-specific data communication channel with one or more sensor units; - a computing system wherein the execution of the machine-executable instructions causes the computing system to: • to establish the sensor-specific data communication channel using the sensor-specific configuration data; • to synchronize the operation of the multiple sensor units using the sensor-specific data communication channel for the multiple sensor units. Clause 2. A vehicle network comprising the electronic vehicle control unit according to Clause 1 and one or more sensor units. Clause 3. The vehicle network according to Clause 2, wherein the multiple sensor units comprise multiple radar systems. Clause 4. The vehicle network according to Clause 3, wherein the execution of the machine-executable instructions further causes the computing system to repeat: - To receive radar data from at least one of the multiple radar systems; - to detect an interference state in the radar data; - To send control commands to change the operating mode to the multiple radar systems in response to the detection of the interference state; and - to synchronize the operation of the multiple radar systems using the sensor-specific data communication channel after the operating mode control commands have been sent to the multiple radar system. Clause 5. The vehicle network according to Clause 3 or 4, wherein the multiple radar systems are configured to operate cooperatively when synchronized through the sensor-specific data communication channel. Clause 6. The vehicle network according to any of Clauses 2 to 5, wherein the sensor-specific configuration data includes sensor position data describing the sensor position relative to the ECU ultra-wideband transceiver, wherein the static sensor-specific configuration data includes a cached security key paired with the sensor position data; - a computing system wherein the execution of the machine-executable instructions causes the computing system to: • to establish the sensor-specific data communication channel using the sensor location data and the cached security key; • to repeatedly measure flight time data that describe the sensor-specific communication channel; • to detect a security breach by comparing the flight time data with the sensor location data; • to initiate a security protocol when the security breach is detected. Clause 7. The vehicle network according to Clause 6, wherein the one or more sensor units comprise a sensor memory which stores a sensor-specific security key for the sensor-specific data communication channel. Clause 8. The vehicle network according to Clause 6 or 7, wherein the security protocol includes one of the following: discarding the sensor-specific communication channel, executing a physical layer security program, regenerating the cached security key, and combinations thereof. Clause 9. The vehicle network according to one of Clauses 2 to 8, wherein the sensor-specific data communication channel conforms to an IEEE802.15.4 standard. Clause 10. The vehicle network according to one of Clauses 2 to 9, wherein the sensor-specific data communication channel is set up with the electronic vehicle control unit as the master station and the one or more sensor units as the slave station. Clause 11. Vehicle network according to any one of claims 2 to 10, wherein the vehicle network further comprises an ultra-wideband repetition configured to form the sensor-specific data communication channel between the ECU ultra-wideband transceiver and at least one of the one or more sensor units. Clause 12. A vehicle that includes the vehicle network according to any of Clauses 2 to 11. Clause 13. Method for operating an electronic vehicle control unit, wherein the electronic vehicle control unit comprises an ECU ultra-wideband transceiver configured to form a sensor-specific data communication channel with one or more sensor units, the method comprising: • Establishment of the sensor-specific data communication channel using sensor-specific configuration data; • Synchronizing the operation of multiple sensor units using the sensor-specific data communication channel for the multiple sensor units. Clause 14. A computer program comprising machine-executable instructions configured to implement the procedure of Clause 13. LIST OF REFERENCE MARKS 100 vehicles 102 vehicle network 104 electronic vehicle control unit 106 Radar system 107 sensor-specific data communication channel 108 computer systems 110 storage 112 ECU ultra wideband transceiver 114 machine-executable instructions 116 sensor-specific configuration data 118 sensor location data 120 flight time data 122 Security Protocol 124 radar data 126 Detected interference state 128 control commands for changing the operating mode 200 Setting up the sensor-specific data communication channel using the sensor location data and the cached security key 202 repeated measurement of the flight time data describing the sensor-specific communication channel 204 Detecting a security breach by comparing flight time data with sensor location data 206 to initiate a security protocol when the security breach is detected 300 Sensor 302 sensor ultra wideband transceiver 304 sensor-internal data communication channel 306 Two-wire power connection 400 vehicles 500 Ultra-Wideband Repeaters 501 Distance greater than 10 meters 502 Sensor-to-ECU message 504 Forwarding the sensor-to-ECU message via UWB repeater 506 ECU-to-Sensor Message 508 Forwarding the ECU-to-sensor message via UWB repeater

Claims

[1] An electronic vehicle control unit (104), comprising: - a memory (110) that stores machine-executable instructions (114) and sensor-specific configuration data (116); - an ECU ultra-wideband transceiver (112) configured to form a sensor-specific data communication channel (107) with one or more sensor units (106, 300), wherein the sensor-specific configuration data includes sensor position data (118) describing the sensor position relative to the ECU ultra-wideband transceiver, and wherein the static sensor-specific configuration data includes a cached security key paired with the sensor position data; and - a computing system (108) wherein the execution of the machine-executable instructions causes the computing system to: • to establish the sensor-specific data communication channel using the sensor location data and the cached security key (200); • to repeatedly measure (202) flight time data (120) that describe the sensor-specific communication channel; • to detect a security breach (204) by comparing the flight time data with the sensor location data; and • to initiate a security protocol (122) (206) when the security breach is detected. [2] Electronic vehicle control unit according to claim 1, wherein the security protocol comprises one of the following: discarding the sensor-specific communication channel, executing a physical layer security program, regenerating the cached security key and combinations thereof. [3] Electronic vehicle control unit according to claim 1 or 2, wherein the sensor-specific data transmission channel is compliant with the IEEE802.15.4 standard. [4] Vehicle network (102) comprising the electronic vehicle control unit according to any one of claims 1 to 4 and one or more sensor units. [5] Vehicle network according to claim 4, wherein the sensor-specific data communication channel is set up with the electronic vehicle control unit as the master station and the one or more sensor units as the slave station. [6] Vehicle network according to claim 5, wherein the one or more sensor units comprise a sensor memory which stores a sensor-specific security key for the sensor-specific data communication channel. [7] Vehicle network according to claim 5 or 6, wherein the one or more sensor units are multiple sensor units, wherein execution of the machine-executable instructions further causes the computing system to synchronize the operation of the multiple sensor units using the sensor-specific data communication channel for the multiple sensor units. [8] Vehicle network according to claim 7, wherein the multiple sensor units comprise multiple radar systems. [9] Vehicle network according to claim 8, wherein execution of the machine-executable instructions further causes the computing system to repeatedly: - To receive radar data from at least one of the multiple radar systems; - to detect an interference state in the radar data; - To send control commands to change the operating mode to the multiple radar systems in response to the detection of the interference state; and - to synchronize the operation of the multiple radar systems using the sensor-specific data communication channel after sending the operating mode control commands to the multiple radar systems. [10] Vehicle network according to claim 8 or 9, wherein the multiple radar systems are configured to operate cooperatively when synchronized through the sensor-specific data communication channel. [11] Vehicle network according to one of claims 4 to 10, wherein the vehicle network further comprises an ultra-wideband repeater (500) configured to form the sensor-specific data communication channel between the ECU ultra-wideband transceiver and at least one of the one or more sensor units. [12] A vehicle (100, 400) comprising the vehicle network according to any one of claims 4 to 11. [13] Method for operating an electronic vehicle control unit (104) using sensor-specific configuration data (116), wherein the electronic vehicle control unit comprises an ECU ultra-wideband transceiver (112) configured to form a sensor-specific data communication channel (107) with one or more sensor units (106, 300), wherein the sensor-specific configuration data includes sensor position data (118) describing the sensor position relative to the ECU ultra-wideband transceiver, wherein the static sensor-specific configuration data includes a cached security key paired with the sensor position data, and wherein the method comprises: • Establishing (200) the sensor-specific data communication channel using the sensor location data and the cached security key; • repeated (202) measurement of flight time data (120) describing the sensor-specific communication channel; • Detecting (204) a security breach by comparing the flight time data with the sensor location data; and • Initiate (206) a security protocol (122) when the security breach is detected. [14] Computer program with machine-executable instructions (114) configured to implement the method according to claim 13.

Images