Improved safety electronics device

Abstract

A security electronic device (10) to be installed on at least one bus (2) of a physical type connecting a data access port (3) to at least one electronic unit (4), the security electronic device (10) being characterized in that it comprises: - a wireless communication module (11) configured to receive at least one external wireless control signal (12) from the outside, - a switching module (13) comprising: • at least one terminal (14) for electrical connection to one end of a segment (2') of the bus (2) which is electrically connected to the access port (3) at the other end, • at least one further connection (15) for the electrical connection to one end of a further segment (2") of the bus (2), which is electrically connected at the other end to the at least one electronic unit (4), - an input (16) for supplying power to the safety electronic device (10) with an external power source, and wherein: - the switching module (13) is configured to alternately comprise: • an activated state in which the connection (14) is in electrical connection with the further connection (15) in order to enable data transmission via the bus (2) between the access port (3) and at least one electronic unit (4), • a deactivated state in which the connection (14) is not in electrical connection with the further connection (15) in order to interrupt the data transmission via the bus (2) between the access port (3) and at least one electronic unit (4), - the switching module (13) is normally in the deactivated state, - the switching module (13) is electronically connected to the wireless communication module (11) so that it controls the transition of the switching module (13) from the deactivated state to the activated state on the basis of the at least one external wireless control signal (12).

Description

Field of the invention

[0001] The present invention relates to a safety electronic device, in particular for a vehicle, a plant or machine, a computer or a computer network, or more generally in all electronic systems in which there is an externally accessible data access port connected via a bus to one or more electronic units.

[0002] Preferably, the safety electronic device is configured to interrupt, in a vehicle, the data transmission via a CAN bus line connecting an access port for vehicle diagnostics, in particular an OBD (“On-Board Diagnostics”) type access port, and one or more electronic units on board the vehicle itself, such as the body control module (also called “Body Control Module” or “BCM”) of the vehicle.

[0003] The present invention is applicable to / in vehicles moving by land (motor vehicles, motorcycles, etc.), by water (boats, etc.) and / or by air (aircraft, drones, etc.) with persons on board and / or remotely controlled.

[0004] The present invention is also applicable to / in a plant or machine in general, for example an industrial automation, in which there is a bus connecting a data access socket and one or more electronic units of the plant or machine.

[0005] The present invention can also be used for / in a computer (such as a computer, PC, laptop, tablet, embedded systems, portable devices, microcontrollers, systems on SOC chips and others) or in a computer network in which there is a bus connecting a data access socket and one or more electronic units, such as a storage unit, associated with that computer or computer network.

[0006] The present invention also relates to a vehicle with such a safety device. STATE OF THE ART

[0007] In the context of the automotive industry and cybersecurity, there is a growing need to protect vehicles from unauthorized access, especially with regard to OBD diagnostic ports (“On-Board Diagnostics”).

[0008] To restrict access to and use of the vehicle's OBD port to authorized personnel only, mechanical solutions have been proposed, particularly metal guards that can be locked and opened with a mechanical key, essentially covering the vehicle's diagnostic port like a safe. Examples of these solutions include the products offered by Blockshaft under the name "Blind-obd" and by Blocksystem under the name "Blockbox."

[0009] Although these mechanical solutions represent an attempt to reduce the risk of unauthorized access, they have significant disadvantages.

[0010] In detail, the known mechanical solutions mentioned above prove to be particularly invasive, since they require anchoring points for installation and therefore require drilling the dashboards and panels of the vehicles (with possible loss of manufacturer's warranties), in addition to being very bulky due to the considerable dimensions of the housing and also in relation to the thickness of the metal used.

[0011] However, the above-mentioned mechanical solutions prove to be vulnerable, as they - with very small unlocking cylinders - can be easily broken with drilling tools, and they are also impractical to use, as you always have to carry a key to open them and, if necessary, require cumbersome and difficult access to attach the diagnostic tool to the hidden OBD socket.

[0012] Furthermore, the known mechanical solutions mentioned above do not guarantee adequate safety in the event of an impact, particularly since they are not regulated by Italian legislation on impact safety and there are no Euro NCAP crash test results in this regard. In particular, the OBD ports, located under the steering wheel or near the clutch according to international standards for diagnostic ports in vehicles, are dangerously close to human body parts such as feet and legs. This positioning makes conventional mechanical solutions for protecting OBD ports from unauthorized access potentially dangerous and makes them potential sources of injury.

[0013] In addition, the above-mentioned known safe solutions installed to cover the OBD socket only protect physical access to the vehicle's OBD socket, i.e. they only prevent unauthorized manual insertion of a device into this OBD socket, but access to the vehicle's diagnostic system is also possible by bridging the CAN bus wires at the output of the protective safe of the OBD socket.

[0014] Furthermore, it should be noted that, for computer security reasons, both in the automotive sector and in general, there is currently a growing need in various fields and contexts to prevent unauthorized external access to various electronic units of the vehicle or the system in general, in order to avoid malicious software intrusions. In particular, this requirement is in line with the new regulations proposed, for example, at European level, which require the adoption of protective measures on motor vehicles to prevent and avoid potential cyberattacks. PURPOSES OF THE INVENTION

[0015] The aim of the invention is to propose a safety device which makes it possible to at least partially solve the disadvantages of the known solutions.

[0016] Another object of the invention is to propose a device which is less invasive, particularly with regard to installation.

[0017] Another object of the invention is to propose a space-saving device.

[0018] Another object of the invention is to propose a device that is simple and quick to install.

[0019] Another object of the invention is to propose a device that is simple and practical to handle / operate.

[0020] Another object of the invention is to prevent unauthorized access to one or more electronic units of a vehicle, a plant or machine, a computer or computer networks or an electronic system in general.

[0021] Another object of the invention is to prevent the theft of data via a data access port, in particular via an OBD port or other data access port or other I / O interface, in a vehicle, a plant or machine, a computer or computer networks or in an electronic system in general.

[0022] Another object of the invention is to prevent the intrusion of malicious software via a data access port, in particular via an OBD port or other data access port or other I / O interface, in a vehicle, a plant or machine, a computer or computer networks or in an electronic system in general.

[0023] Another object of the invention is to propose a device that is not vulnerable and is particularly highly secure against physical and computer attacks.

[0024] Another object of the invention is to propose a device that can be used safely on board a vehicle.

[0025] Another object of the invention is to propose a device that is simple, quick and inexpensive to obtain and implement.

[0026] Another object of the invention is to produce a device that can be mass-produced quickly and efficiently.

[0027] Another object of the invention is to propose a remotely controllable device.

[0028] Another object of the invention is to propose a device that can be improved and / or is an alternative to conventional devices.

[0029] Another object of the invention is to produce a device which, both constructively and functionally, is an alternative characterization to conventional ones.

[0030] Another object of the invention is to propose a device that can be fully and easily integrated into a vehicle, a plant or machine, a computer or computer networks or an electronic system in general. SUMMARY OF THE INVENTION

[0031] All these objects, considered individually or in any combination thereof, and others which will become apparent from the following description, are achieved according to the invention by a device according to claim 1 and a device according to claim 10. Character description

[0032] The present invention is explained in more detail here in some of its preferred practical embodiments, which are shown only for illustration and without limitation with reference to the accompanying drawings, in which: Fig. 1 shows a schematic view of a vehicle with an installed safety electronic device according to the invention, Fig. 2 shows a more detailed schematic view of the safety electronic device according to the invention. DETAILED DESCRIPTION OF THE INVENTION AND SOME OF ITS PREFERRED EMBODIMENTS

[0033] The present invention relates to a safety electronic device - designated as a whole by the reference number '10' - to be installed on at least one physical (i.e. wired / cabled) bus 2 connecting a data access port 3 to at least one electronic unit 4, the device 10 comprising: - a wireless communication module 11 configured to receive at least one external wireless control signal 12 from the outside, - a switching module 13, which comprises: - at least one terminal 14 for electrical connection to one end of a segment 2' of the bus 2, which is electrically connected at the other end to the access port 3, - at least one further terminal 15 for the electrical connection to one end of another segment 2" of the bus 2, which is electrically connected at the other end to the at least one electronic unit 4, - an input 16 for supplying power to the device 10 with an external power source, and wherein: - the switching module 13 is configured to alternately have (and switch between): - an activated state in which the connection 14 is in electrical connection with the further connection 15 and thus enables data transmission via the bus 2 between the access port 3 and the at least one electronic unit 4, and - a deactivated state in which the terminal 14 is not in electrical connection with the further terminal 15 in order to interrupt the data transmission via the bus 2 between the access port 3 and at least one electronic unit 4. - the switching module 13 is normally in the deactivated state, - the switching module 13 is electronically connected to the wireless communication module 11 so that it controls the transition of the switching module 13 from the deactivated state to the activated state on the basis of the at least one external wireless control signal 12.

[0034] The electronic security device 10 can be installed in a vehicle 1, a system or machine, in a computer or in computer networks, or generally in any electronic system in which a data access port 3 is present, which is connected to one or more electronic units 4 via a bus 2. In particular, the data access port 3 is located in an externally accessible or more easily accessible position, while the electronic unit(s) 4 is (are) located in a more internal, covered, or otherwise more difficult to access position.

[0035] Preferably, in a possible and preferred embodiment, the safety electronics device 10 can be installed in a vehicle 1 on / along the CAN bus 2 (i.e., with the CAN standard "Controller Area Network"), which connects the OBD access port 3 ("On-Board Diagnostics") provided in the vehicle 1 to one or more electronic units 4 provided in the vehicle itself, such as the body control module (also called "Body Control Module" or "BCM"). Advantageously, in this case, the safety electronics device 10 selectively interrupts or enables communication and data transmission via the CAN bus type bus 2 between the OBD access port 3 of the vehicle 1 and an electronic unit 4 of the vehicle itself, such as the BCM unit.

[0036] Preferably, the wireless communication module 11 may be electronically connected to the switching module 13 so that it also controls the transition of the switching module 13 from the activated to the deactivated state based on at least one external wireless control signal 12.

[0037] Preferably, the switching module 13 is configured such that if there is no power supply at the input 16, the switching module 13 remains in this deactivated state or returns to it.

[0038] Preferably, access port 3 is an OBD port.

[0039] Preferably, bus 2 is a CAN bus, i.e. a bus that uses the CAN (Controller Area Network) standard.

[0040] Preferably, the bus 2 is a CAN bus network comprising a plurality of electrical units 4 defining the nodes of the network and connected to a single bus so that all nodes of the network can communicate with the other nodes of the network.

[0041] Conveniently, this bus 2 can comprise a single signal line or at least two signal lines, 21' + 22' and 21" + 22", respectively. More preferably, the bus 2 comprises a signal line 21' + 22' for a higher voltage level (e.g., a CAN line H) and a signal line 21" + 22" for a lower voltage level (e.g., a CAN line L). Conveniently, the segment 2' of this bus 2 between the access port 3 and the safety electronics device 10 can comprise a first signal line 21' and a second signal line 21", while the further segment 2" of the bus 2 between the safety electronics device 10 and the electronics unit 4 can comprise a further first signal line 22' and a further second signal line 22". Preferably, the bus 2 is configured to define a differential communication bus between the access port 3 and at least one electronics unit 4.

[0042] Preferably, the switching module 13 may comprise a first connection 14' for the first signal line 21' and a second connection 14" for the second signal line 21" of the bus segment 2' between the access port 3 and the device 10. Preferably, the safety electronics device 10 may comprise a further first connection 15' for the further first signal line 22' and a further second connection 15" for the further second signal line 22" of the further bus segment 2' between the device 10 and the electronics unit 4.

[0043] Preferably, the switching module 13 is configured to alternately accept and switch between: - an activated state in which the first terminal 14' is in electrical connection with the further first terminal 15' and in which the second terminal 14" is in electrical connection with the further second terminal 15" in order to enable two-way data transmission via the respective signal lines of the bus 2 - and in particular to connect the first signal line 21' with the further first signal line 22' and the second signal line 21" with the further second signal line 22" - between the access port 3 and at least one electronic unit 4, and - a deactivated state in which the first connection 14' is not in electrical connection with the further first connection 15' and in which the second connection 14" is not in electrical connection with the further second connection 15", in order to prevent (interrupt) the two-way data transmission via the respective signal lines of the bus 2 - and in particular to thereby separate the first signal line 21' from the further first signal line 22' and the second signal line 21" from the further second signal line 22" - between the access port 3 and at least one electronic unit 4.

[0044] Preferably, the electronic unit 4 is an electronic unit of a vehicle 1. Preferably, this electronic unit 4 is the electronic control unit of a vehicle 1. Ideally, the electronic unit 4 is the body control module (also called “Body Control Module” or “BCM”) of a vehicle 1, which in turn can be connected to other electronic units provided in the vehicle, such as the various ECUs (Electronic Control Units) of the engine, the transmission, the airbag, the ABS, the sensors, the heating, ventilation and air conditioning systems (HVAC), etc.

[0045] Preferably, the wireless communication module 11 is a radio communication module, i.e., it is of the type suitable for receiving—and optionally also transmitting—radio signals. In particular, the wireless communication module 11 comprises a radio receiver or radio transceiver. Conveniently, the wireless communication module 11 can be configured for wireless reception or transmission / reception via Wi-Fi technology or based on traditional standards such as Bluetooth® or ZigBee®. Preferably, the wireless communication module 11 can be configured for wireless reception or transmission / reception at short range. In one possible and preferred embodiment, the wireless communication module 11 is a communication module using Bluetooth® technology, preferably “Bluetooth Low Energy” technology, also called “BLE.”

[0046] Preferably, the external wireless control signal 12 can be sent to the wireless communication module 11 of the device 10 from a smartphone 20, and in particular from corresponding wireless communication means with which the smartphone 20 is equipped. For the purposes of this patent application, the smartphone 20 is conveniently considered equivalent to a tablet or even to a radio remote control or, in general, to another portable electronic device equipped with wireless communication means for transmitting an external wireless control signal 12.

[0047] Conveniently, the wireless communication means of the smartphone 20 and the wireless communication module 11 of the device 10 use the same radio communication technology, which may preferably be Bluetooth technology and more preferably “Bluetooth Low Energy” technology, also called “BLE”.

[0048] Preferably, in one possible embodiment, the wireless communication module 11 is configured to define bidirectional communication, ie, with transmission / reception, with the wireless communication means of the smartphone 20. Further preferably, the wireless communication module 11 of the device 10 and the wireless communication means of the smartphone 20 are configured to communicate bidirectionally with each other using Bluetooth® technology, and even more preferably using "Bluetooth Low Energy" technology, also called "BLE."

[0049] Conveniently, as already mentioned, the switching module 13 of the device is mounted on the bus 2, thus dividing the same bus into: - a first segment 2' connected at one end to a terminal 14 of the switching module 13 and at the other end to the access port 3, and - a second segment 2", which is connected at one end to another terminal 15 of the switching module 13 and at the other end to the electronics unit 4.

[0050] Preferably, the switching module 13 comprises a relay. More preferably, the switching module 13 comprises a two-way relay. Ideally, the switching module 13 comprises a low-power relay, for example, of the type that requires a supply voltage of 12-24V.

[0051] Preferably, the switching module 13 is electronically connected to this wireless communication module 11 via a control module 17 so that it controls the transition of this switching module 13 from the deactivated state to the activated state based on the external wireless control signal 12.

[0052] In particular, the control module 17 is electronically connected and connected between the wireless communication module 11 and the switching module 13. The control module 17 is configured to control the switching module 13 based on the external wireless control signal 12 and, in particular, to effect the state change from deactivated to activated (and preferably also vice versa) of the switching module 13 based on the external wireless control signal 12 received by the wireless communication module 11.

[0053] Preferably, the control module 17 is connected to the switching module 13 via a wired electrical connection, which may, for example, be via cable / wire, by means of conductive traces, welds, or other physical electrical connection means. Conveniently, the control module 17 sends a corresponding command to the switching module 13 based on the external wireless control signal 12 received from the wireless communication module 11, thereby causing the switching module 13 to transition from the deactivated state to the activated state.

[0054] Conveniently, the control module 17 may comprise a further relay in one possible embodiment. Conveniently, the control module 17 may comprise a transistor in one possible embodiment. Conveniently, the control module 17 may be a double-pole switch in one possible embodiment.

[0055] Conveniently, the device 10 is configured to be externally powered (i.e., the device's power supply originates from a source external to the device itself). Preferably, the device 10 is powered via cables from an electrical source provided in the vehicle, installation, machine, computer, or computer network, or more generally in the electronic system in which the device 10 is to be installed. Optionally, for example, the device 10 may be powered by the vehicle battery 1, via the vehicle's OBD access port 3, or via the vehicle's BCM electronics unit 4 itself.

[0056] Conveniently, the wireless communication module 11, the control module 17 and the switching module 13 are configured for low-voltage operation, for example with a supply voltage of 12 / 24 volts.

[0057] Preferably, the input 16 for supplying power to the device 10 with an external power source comprises electrical contacts or a socket or a plug for connection to an external power source.

[0058] Preferably, the control module 17 includes the input 16 for supplying power to the device 10 with an external power source. Further preferably, the control module 17 and the switching module 13 are configured and connected such that, in the absence of power at the input 16 provided in the control module 17, the switching module 13 controls the switching module 13 to be placed in the deactivated state or at least held there, thereby interrupting data transmission via the bus 2 between the access port 3 and the electronics unit 4. Conveniently, for example, by disconnecting the battery that supplies power to the device 10, the switching module 13 remains in the deactivated state or is otherwise placed there, thereby interrupting data transmission via the bus 2 between the access port 3 and the electronics unit 4.

[0059] In a possible and preferred embodiment, the switching module 13 comprises a relay and, in addition, the wireless communication module 11 - which is preferably a communication module with “Bluetooth Low Energy” technology (also called “BLE”) - is electronically connected to the relay of the switching module 13 via the further relay of the control module 17.

[0060] In one possible embodiment, the wireless communication module 11 and the control module 17 can be integrated into a single component. Conveniently, the switching module 13 can consist of a further component that is electrically connected to this component, which comprises the wireless communication module 11 and the control module 17.

[0061] In a possible and preferred embodiment, the switching module 13 and the wireless communication module 11 are mounted with the control module 17 on one and the same circuit board, in particular on a printed circuit board (PCB). In this case, the connections between the modules can optionally be established by printed circuit boards or by welds.

[0062] Preferably, the device 10 may comprise a housing (not shown) configured to contain and / or cover the modules of the device itself and so that they are directly or indirectly accessible from the outside: - the input 16 for the external power supply of the device 10, - at least one terminal 14 for the electrical connection to the segment 2' of the bus 2, which is in electrical connection with the access port 3, - the at least one further connection 15 for the electrical connection to a further segment 2" of the bus 2, which is in electrical connection with the at least one electronic unit 4.

[0063] Preferably, the modules of device 10 are mounted on the same / single printed circuit board (PCB), which is largely covered by an electrically insulating housing. For example, such an electrically insulating housing may comprise a shrink sleeve made of heat-shrinkable and electrically insulating polymer material.

[0064] Further preferably, the electrically insulating housing covers the entire circuit board with the modules in such a way that only the input 16 for supplying the device with an external power supply source, namely at least the terminal 14 for the electrical connection to the segment 2' of the bus 2, which is in electrical connection with the access port 3, and also at least one further terminal 15 for the electrical connection to a further segment 2" of the bus 2, which is in electrical connection with the at least one electronic unit 4, is exposed - or at least accessible.

[0065] In a further possible and preferred embodiment, the switching module 13 and the wireless communication module 11 with associated control module 17 are each mounted on two separate electronic boards, which are then electronically connected to one another by appropriate cabling.

[0066] Conveniently, the safety device 10 is particularly small and thus space-saving. This is particularly advantageous because it facilitates the installation and positioning of the device itself. For example, when installed in a vehicle 1, the device can be inserted into the cable sheath of the CAN bus network 2 of the vehicle 1, preferably near the vehicle's BCM electronics unit 4, and thus concealed.

[0067] Preferably, the external wireless control signal 12 can be encoded, for example, in a hexadecimal character string. Preferably, the external wireless control signal 12 can comprise a first external wireless control signal for causing the transition from the deactivated to the activated state of the switching module 13 of the device 10, and a second external wireless control signal for causing the transition from the activated to the deactivated state of the switching module 13 of the device 10. Conveniently, the first and second wireless signals can be the same or different.

[0068] Conveniently, the smartphone 20 is configured - and in particular programmed - to send an external wireless control signal 12 to the wireless communication module 11 of the device in order to control the transition of the switching module 13 between the two states activated and deactivated in order to enable or interrupt the data transmission via the bus 2 between the access port 3 and the electronic unit 4, respectively.

[0069] Conveniently, a suitable software module can be loaded and executed in the smartphone 20, and in particular in its processor. This software module can preferably be a native mobile software application, also known as an APP, or it can be provided at the level of the settings of the smartphone's operating system. Preferably, the software module comprises at least one firmware that acts on the wireless communication means of the smartphone 20.

[0070] Conveniently, this software module (loaded and / or executed in the smartphone) can be configured to generate at least one suitable screen on the display of the smartphone 20 to allow the user to control the sending of an external wireless control signal 12 to the communication module 11 of the device to cause the switching module 13 to transition between the two activated and deactivated states, thus enabling or interrupting the data transmission via the bus 2 between the access port 3 and the electronic unit 4.

[0071] Conveniently, the software module (which is loaded and / or executed in the smartphone) can be configured to enable the connection / pairing of the wireless communication module 11 of the device 10 with the wireless communication means of the smartphone 20 only after an authentication procedure, in order to thereby be able to correctly send an external wireless control signal 12 to the wireless communication module 11 of the device 10. Preferably, the software module loaded and executed on the smartphone 20 can be configured such that the entry of a PIN, a password, or generally a code is required in order to be able to pair the device 10 with the smartphone 20.In particular, once the smartphone 20 has been paired with the device 10 following an authentication procedure, the user can use the smartphone 20 to send an external wireless control signal 12 to the wireless communication module 11 of the device 10 in order to bring about the change of state of the switching module 13 of the device itself.

[0072] As already mentioned, in the absence of an external wireless control signal 12 and / or in the absence of an external power supply, the switching module 13 is in a deactivated state, thereby preventing data transmission via the bus 2 between the access port 3 and the electronics unit 4.

[0073] In particular, sending a first external wireless control signal 12 via the smartphone 20 to the wireless communication module 11 of the device 10 causes the switching module 13 to transition from the normally deactivated state to the activated state, thus enabling data transmission via the bus 2 between the access port 3 and the electronics unit 4. Therefore, a diagnostic and / or programming device can expediently be physically and / or mechanically connected to the access port 3, thereby enabling data transmission in read and / or write mode with the electronics unit 4. In principle, the electronics unit 4 is thus accessible from the outside.

[0074] Advantageously, the electronic unit 4, which is connected to the access port 3 via the bus 2, is suitably protected and inaccessible as long as an authorized user sends a corresponding first external wireless control signal 12 via smartphone 20.

[0075] Preferably, when the switching module 13 is in the activated state, by sending - via the smartphone 20 - to the wireless communication module 11 of the device 10 a second external wireless control signal 12 (which may be different from or the same as the first external wireless control signal), the switching module 13 is caused to transition from the activated to the deactivated state in order to interrupt the data transmission via the bus 2 between the access port 3 and the electronics unit 4.

[0076] The safety device 10 according to the invention has been described here in particular with regard to its installation in the CAN bus network 2 of a vehicle 1 between the OBD access port 3 of the vehicle 1 and the BCM electronic unit 4 of the vehicle 1 itself, but it is understood that it can be installed in any electronic system in which a bus connects an access port to an electronic unit, for example in a machine or industrial plant or in a computer or computer network.

[0077] The present invention also relates to a device for a vehicle, an installation, a machine, a computer or a computer network or, in general, for an electronic system, the device comprising a data access port 3, preferably an OBD port, connected to at least one electronic unit 4 via a bus 2, preferably of the CAN bus type, and characterized in that the device also comprises a safety device 10 as described above, installed on this bus 2 between the data access port 3 and the electronic unit 4.

[0078] Advantageously, the security device 10 described above - installed on a bus 2 between an access port 3 and at least one electronic unit 4 - is used to protect the data transmission via the bus 2 between the access port 3 and the electronic unit 4.

[0079] Conveniently, the switching module 13 of the security device 10 is normally in a deactivated state in order to interrupt the data transmission between the access port 3 and at least one electronic unit 4.

[0080] When the safety electronic device 10 is no longer supplied with power, the switching module 13 of the safety device 10 is expediently set to the deactivated state or otherwise remains in this state in order to interrupt the data transmission between the access port 3 and the at least one electronic unit 4.

[0081] In order to expediently enable data transmission between the access port 3 and at least one electronic unit 4, the following steps are carried out: - the wireless communication means of a smartphone 20 or in any case of another equivalent portable device provided with wireless communication means are coupled to the wireless communication module 11 of the security device 10, - an external wireless control signal 12 is sent via smartphone 20 to the wireless communication module 11 of the safety device 10 in order to cause the switching module 13 of the device to transition from the deactivated to the activated state.

[0082] Preferably, this pairing phase can only be performed after a correct authentication procedure via this smartphone 20.

[0083] In order to interrupt the data transmission via the bus 2 between the access port 3 and the at least one electronic unit 4, an external wireless control signal 12 is expediently sent via smartphone 20 to the wireless communication module 11 of the security device 10 in order to cause the switching module 13 of the device to transition from the activated to the deactivated state.

[0084] The present invention also relates to a vehicle 1 which: - is provided with a data access port 3 which is connected to an electronic unit 4 via a bus 2, - a security device 10 as described above, installed on the bus 2 between the data access port 3 and the electronics unit 4.

[0085] Preferably, the access port 3 is an OBD port of the vehicle. Preferably, the bus 2 is the CAN bus network of the vehicle 1. Preferably, this electronic unit 4 is the vehicle's BCM.

[0086] Conveniently, this vehicle 1 may be any vehicle moving by land (motor vehicles, motorcycles, etc.), by water (boats, etc.) and / or by air (aircraft, drones, etc.) with persons on board and / or remotely controlled.

[0087] The present invention also relates to a plant or machine (not shown) which: - is provided with a data access port 3 which is connected to an electronic unit 4 via a bus 2, - a security device 10 as described above, installed on the bus 2 between the data access port 3 and the electronics unit 4.

[0088] Preferably, the access port 3 is an I / O interface of the system or machine. Preferably, the bus 2 is the CAN bus network of the system or machine. Preferably, the electronics unit 4 is a PLC of the system or machine.

[0089] The present invention also relates to a computer (such as computers, PCs, laptops, tablets, embedded systems, wearables, microcontrollers, systems on SOC chips and others) or a computer network that: - is provided with a data access port 3 which is connected to an electronic unit 4 via a bus 2, - a security device 10 as described above, installed on the bus 2 between the data access port 3 and the electronics unit 4.

[0090] Preferably, this access door 3 is a data access port and / or I / O interface of this computer or computer network. Preferably, the bus 2 is the CAN bus network of this computer or computer network. Preferably, this electronics unit 4 is a storage unit associated with this computer or computer network.

[0091] As is clear from the above, the solution according to the invention proves to be very advantageous since it makes it possible to achieve all the purposes mentioned, in particular the device: - is easy and quick to install, - is compatible with all vehicles on the market, from motorcycles to cars, commercial vehicles, agricultural vehicles and all the latest generation of electric vehicles; - is compatible with all CAN bus network hardware; - is space-saving and minimally invasive to install; - is easy and cost-effective to implement, - is easy to operate and control by using a widely available device such as a smartphone, transforming it into a remote control.

[0092] Advantageously, the solution according to the invention operates electronically—rather than mechanically—and causes the complete interruption of the electrical connection and thus of data communication via the bus that electrically connects the data access socket to one or more electronic units of an electronic system of the vehicle, plant, machine, computer, or computer network. Essentially, the controlled electrical interruption of the electrical connection that electrically connects the access socket to an electronic unit via the bus enables communication / data transmission.

[0093] Advantageously, the solution according to the invention enables effective, direct, secure, simple and immediate protection of data transmission, even on both sides, along the bus that electrically connects the data access socket to one or more electronic units of the system.

[0094] Advantageously, the solution according to the invention makes it possible to prevent inadvertent access by malicious persons, or in any case, inadvertent access through the use of specific diagnostic tools, data loggers, and / or programmers, thus preventing, for example, the copying of security data contained in the electronic control unit (ECU) or body control module (BCM) of a vehicle, or the password for accessing corporate systems contained in the ROMs of network devices. This, in particular, prevents the addition of new keys and / or remote controls in addition to those possessed by the owner in the case of vehicles, and makes administrative access to a corporate CAN bus network more secure.

[0095] The present invention has been explained and described in some of its preferred embodiments, but it is understood that variants of embodiment may contribute to it in practice without, however, departing from the scope of protection of this patent by industrial invention.

Claims

[1] Security electronic device (10) to be installed on at least one bus (2) of a physical type connecting a data access port (3) to at least one electronic unit (4), the security electronic device (10) characterized by is that it includes: - a wireless communication module (11) configured to receive at least one external wireless control signal (12) from the outside, - a switching module (13) comprising: • at least one terminal (14) for electrical connection to one end of a segment (2') of the bus (2) which is electrically connected to the access port (3) at the other end, • at least one further connection (15) for the electrical connection to one end of a further segment (2") of the bus (2), which is electrically connected at the other end to the at least one electronic unit (4), - an input (16) for supplying power to the safety electronic device (10) with an external power source, and wherein: - the switching module (13) is configured to alternately comprise: • an activated state in which the connection (14) is in electrical connection with the further connection (15) in order to enable data transmission via the bus (2) between the access port (3) and at least one electronic unit (4), • a deactivated state in which the connection (14) is not in electrical connection with the further connection (15) in order to interrupt the data transmission via the bus (2) between the access port (3) and at least one electronic unit (4), - the switching module (13) is normally in the deactivated state, - the switching module (13) is electronically connected to the wireless communication module (11) so that it controls the transition of the switching module (13) from the deactivated state to the activated state on the basis of the at least one external wireless control signal (12). [2] The device according to claim 1, wherein the wireless communication module (11) is electronically connected to the switching module (13) so that it also controls the transition of the switching module (13) from the activated state to the deactivated state based on at least one external wireless control signal (12). [3] Device according to one or more of the preceding claims, wherein: - the wireless communication module (11) is a radio communication module, preferably a communication module with Bluetooth® technology, preferably Bluetooth Low Energy (BLE), and - the switching module (13) comprises a relay, preferably a low-power relay. [4] Device according to one or more of the preceding claims, wherein the switching module (13) comprises: - a first connection (14') for a first signal line (21') of the bus segment (2') between the access port (3) and the safety electronic device (10), - a second connection (14") for a second signal line (21") of the bus segment (2') between the access port (3) and the safety electronic device (10), - a further first connection (15') for a further first signal line (22') of the additional bus segment (2") between the safety electronics device (10) and the electronics unit (4), - a further second connection (15") for a further second signal line (22") of the additional bus segment (2") between the safety electronic device (10) and the electronic unit (4), and wherein the switching module (13) is configured to alternately assume: - the activated state in which the first terminal (14') is in electrical connection with the further first terminal (15') and in which the second terminal (14") is in electrical connection with the further second terminal (15"), whereby data transmission via the respective signal lines (21', 21", 22', 22") of the bus (2) between the access port (3) and the at least one electronic unit (4) is enabled, - the deactivated state in which the first connection (14') is not in electrical connection with the further first connection (15') and in which the second connection (14") is not in electrical connection with the further second connection (15"), whereby the data transmission via the respective signal lines (21', 21", 22', 22") of the bus (2) between the access port (3) and the at least one electronic unit (4) is interrupted. [5] Device according to one or more of the preceding claims, wherein the switching module (13) is electronically connected to the wireless communication module (11) via a control module (17), wherein the control module (17) comprises an additional relay or a transistor. [6] Device according to one or more of the preceding claims, wherein: - the switching module (13) is electronically connected to the wireless communication module (11) via a control module (17), - the control module (17) and the switching module (13) are configured and connected in such a way that, in the absence of a power supply at the input (16) provided in the control module (17), the switching module (13) controls the switching module (13) in such a way that it is put into the deactivated state or at least kept in this state, whereby the data transmission via the bus (2) between the access port (3) and the electronic unit (4) is interrupted. [7] Device according to one or more of the preceding claims, further comprising a housing configured to contain and / or cover the modules of the security electronics device (10) itself, and in which they are directly or indirectly accessible from the outside: - the input (16) for the power supply of the safety electronic device (10), - the at least one terminal (14) for the electrical connection to the segment (2') of the bus (2) which is in electrical connection with the access port (3), - the at least one further connection (15) for the electrical connection to a further segment (2') of the bus (2) which is in electrical connection with the at least one electronic unit (4). [8] Device according to one or more of the preceding claims, wherein: - the switching module (13) of the security electronic device (10) is normally in a deactivated state so as to interrupt the data transmission between the access port (3) and the at least one electronic unit (4), - when the security electronic device (10) is not supplied with power, the switching module (13) of the security electronic device (10) is set to the deactivated state or in any case remains there in order to interrupt the data transmission between the access port (3) and at least one electronic unit (4). [9] Device according to one or more of the preceding claims, wherein: - the wireless communication module (11) of the security electronic device (10) is configured to be coupled to the wireless communication means of a smartphone (20) or other equivalent portable device provided with wireless communication means, and - the wireless communication module (11) of the security electronics device (10) is configured to receive an external wireless control signal (12) from the smartphone (20) in order to cause the switching module (13) of the security electronics (10) to transition from the deactivated to the activated state. [10] Device for a vehicle (1), installation, machine, computer or computer network or, in general, for an electronic system, the device comprising: - a data access port (3), preferably an OBD access port, which is connected to at least one electronic unit (4) via a bus (2), preferably a CAN bus, and wherein the device further comprises a safety electronic device (10) according to one or more of the preceding claims, which is installed on the bus (2) between the data access port (3) and the at least one electronic unit (4).

Images