Method and device for transmitting data associated with data source
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2023-05-18
- Publication Date
- 2026-04-03
AI Technical Summary
Existing data transmission methods face challenges in efficiently transmitting data values while ensuring authenticity and integrity, often leading to high bandwidth usage and interference.
A method involving a computer-implemented approach where first information, such as a message authentication code (e.g., CMAC), is distributed with data values to ensure authenticity and integrity, using a fraction of the data bandwidth, allowing for low interference transmission.
This method reduces bandwidth usage and minimizes interference by transmitting data values with a small portion of information, enabling effective authenticity and integrity checks at the receiving end.
Smart Images
Figure 00000000_0000_ABST
Abstract
Description
Technical Field
[0001] Prior Art The present disclosure relates to a method for transmitting data associated with a data source, for example, a computer-implemented method.
[0002] The present disclosure further relates to an apparatus for transmitting data associated with a data source.
[0003] The present disclosure further relates to a method for receiving data associated with a data source, for example, a computer-implemented method.
[0004] The present disclosure further relates to an apparatus for receiving data associated with a data source.
Summary of the Invention
Means for Solving the Problems
[0005] Disclosure of the Invention Exemplary embodiments relate to a method for transmitting data associated with a data source, for example, a sensor device, for example, a sensor device for an automobile, for example, a computer-implemented method, the method comprising obtaining first information enabling a check of the reliability and / or integrity of at least one data value that can be provided by the data source, and transmitting a plurality of data values to at least one further unit, wherein at least some of the plurality of data values are transmitted together with each part of the first information, for example. In this way, in a further exemplary embodiment, the first information can be distributed, so to speak, to the plurality of data values and transmitted to at least one further unit together with these plurality of data values, whereby, for example, the bandwidth used for transmitting the first information becomes relatively small, and the interference related to transmitting the data values becomes correspondingly small or does not occur at all.
[0006] In further exemplary embodiments, at least one further unit may receive transmitted data values along with portions of first information, and for example, may aggregate first information from the received portions of first information, and the thus aggregated first information may be used, for example, to verify the reliability and / or completeness of at least one data value that can be provided by the data source or transmitted to the further unit.
[0007] In further exemplary embodiments, the method according to the embodiment can be implemented using, for example, a sensor device having a data source, and at least one further unit is a control device configured to receive and / or process data values, for example. For example, the sensor device is a sensor device for a vehicle steering system.
[0008] In further exemplary embodiments, for example, sequentially consecutive data values to be transmitted may comprise, or be transmitted together with, a corresponding portion of the first information.
[0009] In further exemplary embodiments, for example, data values to be transmitted, each not directly sequentially consecutive, may comprise, or be transmitted together with, a corresponding portion of the first information. In other words, for example, some data values to be transmitted may be transmitted together with a corresponding portion of the first information, while some other data values to be transmitted may not be transmitted together with a corresponding portion of the first information.
[0010] In further exemplary embodiments, it is assumed that obtaining the first information involves at least forming a message authentication code, e.g., a MAC, based on at least one data value, the message authentication code being, for example, a CMAC type having a length of, for example, 128 bits or more, according to Chapter 6.2 of https: / / doi.org / 10.6028 / NIST.SP.800-38B.
[0011] In further exemplary embodiments, the method is envisioned to include forming first information based on at least one data value and second information, for example, the second information including at least one of the following elements: a) a random value, b) a pseudo-random value, and c) a counter value of a counter, for example, the counter being repeatedly initialized based on, for example, a random value or a pseudo-random value, for example, when the apparatus carrying out the method is activated.
[0012] In further exemplary embodiments, transmitting a plurality of data values to at least one further unit is envisioned to include combining, for example, concatenating, a first data value of the plurality of data values with a first part of a first piece of information to generate a first data packet; transmitting the first data packet to at least one further unit; and optionally repeating the combining and transmitting for at least one further data value.
[0013] In further exemplary embodiments, the amount of data used to represent the first portion of information is assumed to be 20% or less of the amount of data used to represent at least one data value, for example, 5% or less, for example, 1% or less.
[0014] In a further exemplary embodiment, the method is envisioned to include: obtaining a first piece of information for each nth data value of a data source, where n > 8, and for example, n is a power of 2; distributing the first piece of information to m data values, where m >= 2, and for example, m = n; and transmitting each of the m data values along with the respective portion of the distributed first piece of information.
[0015] For example, in a further exemplary embodiment, the data source can repeatedly supply data values, for example periodically, at a rate of, for example, 2 kHz, i.e., it can repeatedly supply 2000 data values per second. For example, for every 128th data value, a first piece of information I-1 may be formed, for example, in the form of a 128-bit CMAC. For example, this 128-bit CMAC can be divided into 128 parts, each of which is 1 bit, and each of these parts is transmitted, for example, along with the data value to at least one further unit. Thus, after receiving the 128 data values along with each part of the first piece of information, the further unit can perform a local check of the data values underlying the 128-bit CMAC, for example, since all 128 parts of the first piece of information are present.
[0016] In further exemplary embodiments, the portion of the first information may have a different size than the single bit exemplified above, for example, two or more bits.
[0017] In further exemplary embodiments, the method is envisioned to include at least one of the following elements: providing a first key (e.g., a symmetric key for CMAC formation) for obtaining, for example, first information; providing a second information, i.e., providing said second information for obtaining, for example, first information; obtaining a first data value; obtaining the first information based on the first key, the second information and the first data value; dividing the first information into n parts; transmitting each of the n data values, together with, for example, each part of the first information, to at least one further unit; and optionally repeating at least several aspects for, for example, at least one further data value.
[0018] Further exemplary embodiments relate to a method for receiving data associated with a data source, such as a sensor device, such as a sensor device for an automobile, such as a computer-implemented method, the method comprising: receiving a plurality of data values, each of which a portion of first information is assigned to at least some of the plurality of data values, the first information enabling verification of the reliability and / or completeness of at least one first data value available and / or received by the data source; aggregating these portions of first information into first information; and verifying the reliability and / or completeness of at least one first data value based on the first information. The method can be implemented, for example, in at least one further unit (such as a control device), thereby receiving, for example, transmitted data values together with their respective associated portions of first information, according to the principles of the embodiment.
[0019] Further exemplary embodiments relate to apparatus for carrying out the method according to the embodiments.
[0020] In further exemplary embodiments, the apparatus may be configured to carry out at least some aspects of the method according to the embodiment.
[0021] Further exemplary embodiments relate to a sensor device having at least one device according to an embodiment, for example, a sensor device for an automobile.
[0022] Further exemplary embodiments relate to control devices having at least one device according to an embodiment, such as a control device for an automobile.
[0023] Further exemplary embodiments relate to a technical product, such as an automobile, comprising at least one device according to the embodiment and / or at least one sensor device according to the embodiment and / or at least one control device according to the embodiment.
[0024] Further exemplary embodiments relate to a computer-readable storage medium, which, when executed by a computer, includes instructions causing the computer to carry out the method according to the embodiment.
[0025] Further exemplary embodiments relate to a computer program, which includes instructions to cause the computer to carry out the method according to the embodiment when the computer executes the program.
[0026] Further exemplary embodiments relate to data carrier signals for transmitting and / or characterizing computer programs according to embodiments.
[0027] Further exemplary embodiments relate to the use of a method according to an embodiment and / or an apparatus according to an embodiment and / or a sensor device according to an embodiment and / or a control device according to an embodiment and / or a technical product according to an embodiment and / or a computer-readable storage medium according to an embodiment and / or a computer program according to an embodiment and / or a data carrier signal according to an embodiment for at least one of the following elements, namely, a) protecting the integrity and / or reliability of data associated with a data source, for example by encryption, b) identifying an attack on a data connection between the data source and at least one further unit, c) distributing first information to a plurality of data packets, d) preventing unauthorized introduction of data into a data connection between the data source and at least one further unit.
[0028] Further features, possible uses and advantages of the present invention will become apparent from the following description of embodiments of the present invention shown in the figures of the drawings. All features described or illustrated, either alone or in any combination, form the subject matter of the present invention, regardless of their gist or their citation in the claims and regardless of the language or expression of these features in the specification or drawings.
Brief Description of the Drawings
[0029] [Figure 1] It is a diagram schematically showing a simplified flowchart according to an exemplary embodiment. [Figure 2] It is a diagram schematically showing a simplified flowchart according to a further exemplary embodiment. [Figure 3] It is a diagram schematically showing a simplified block diagram according to a further exemplary embodiment. [Figure 4] It is a diagram schematically showing a simplified flowchart according to a further exemplary embodiment. [Figure 5] It is a diagram schematically showing a simplified flowchart according to a further exemplary embodiment. [Figure 6]This figure schematically shows a simplified block diagram according to a further exemplary embodiment. [Figure 7] This figure schematically shows a simplified flowchart according to a further exemplary embodiment. [Figure 8] This figure schematically shows a simplified block diagram according to a further exemplary embodiment. [Figure 9] This figure schematically shows a simplified block diagram according to a further exemplary embodiment. [Figure 10] This figure schematically shows a simplified block diagram according to a further exemplary embodiment. [Figure 11] This figure schematically illustrates the use of the product according to further exemplary embodiments. [Modes for carrying out the invention]
[0030] An exemplary embodiment in Figure 1 relates to a data source 100 (see Figure 6), for example, a sensor device 100a, for example, a sensor device 100a for an automobile 10 (Figure 9), a method for transmitting data, for example, a computer-implemented method, the method comprising: obtaining first information I-1 that enables verification of the reliability and / or integrity of at least one data value DW-1 that can be provided by the data source 100 (Figure 1); and transmitting a plurality of data values DW-1, DW-2, DW-3,... to at least one further unit 100b (Figure 6) 202, where at least some of the plurality of data values DW-1, DW-2, DW-3,... are transmitted together with each part of the first information I-1, for example, I-1_DW_1, I-1_DW_2, I-1_DW-3,... In this way, in a further exemplary embodiment, the first information I-1 can be distributed, so to speak, into a plurality of data values and transmitted together with these plurality of data values to at least one further unit 100b, thereby reducing the bandwidth used for, for example, transmitting the first information I-1 202, and consequently reducing or eliminating interference with respect to transmitting the data values 202.
[0031] In a further exemplary embodiment, at least one further unit 100b (Figure 6) can receive transmitted data values DW-1, DW-2, ... along with portions I-1_DW-1, I-1_DW-2, ... of the first information I-1, and can aggregate the first information I-1 from the received portions of the first information I-1, and can use the thus aggregated first information I-1 to check the reliability and / or integrity of at least one data value DW-1, ... that can be provided by the data source 100 or transmitted to the further unit 100b.
[0032] In a further exemplary embodiment shown in Figure 6, the method according to the embodiment can be implemented using, for example, a sensor device 100a having a data source 100, and at least one further unit 100b is a control device configured to receive and / or process, for example, data values DW-1, DW-2, DW-3,.... For example, sensor device 100a is a sensor device for the steering system of a vehicle 10 (Figure 9).
[0033] The data transmission A1 from the sensor device 100a to the control device 100b may be performed, for example, via a SENT (Single Edge Nibble Transmission) interface or another data interface.
[0034] In further exemplary embodiments, for example, sequentially consecutive data values DW-1, DW-2, ... to be transmitted may comprise, or be transmitted together with, corresponding portions of the first information I-1, I-1_DW-1, I-1_DW-2, ...
[0035] In further exemplary embodiments, for example, data values to be transmitted DW-1, DW-x, ... which are not directly sequentially consecutive, may comprise, or be transmitted together with, corresponding parts of the first information I-1_DW-1, I-1_DW-2, ... In other words, for example, some data values to be transmitted may be transmitted together with corresponding parts of the first information, while some other data values to be transmitted may not be transmitted together with corresponding parts of the first information.
[0036] In a further exemplary embodiment shown in Figure 1, it is assumed that obtaining the first information I-1 200 includes at least one forming a message authentication code, e.g., a MAC, based on at least one data value DW-1, for example, the message authentication code being of type CMAC, having a length of, for example, 128 bits or more, according to Chapter 6.2 of https: / / doi.org / 10.6028 / NIST.SP.800-38B.
[0037] In a further exemplary embodiment shown in Figure 1, the method is assumed to include forming a first piece of information I-1 based on at least one data value DW-1 and a second piece of information I-2, for example, the second piece of information I-2 includes at least one of the following elements: a) a random value (e.g., can be provided by an arbitrarily chosen random number generator), b) a pseudo-random value, and c) a counter value ZW of an arbitrarily chosen counter 102 (Figure 6), for example, the counter 102 can be repeatedly initialized, for example, based on the random value or pseudo-random value, for example, when the device 100a implementing the method is activated.
[0038] In a further exemplary embodiment shown in Figure 2, the transmission of a plurality of data values DW-1, DW-2, ... to at least one further unit 100b 202 (Figure 1) is assumed to include 202a (Figure 2), for example concatenation, of combining the first data value DW-1 of the plurality of data values with a first part I-1_DW-1 of the first information I-1 to generate a first data packet DP-1, and 202b of transmitting the first data packet DP-1 to at least one further unit 100b 202b, and optionally repeating the combination 202a and transmission 202b for at least one further data value DW-2, DW-3, ... and corresponding parts I-1_DW-2, I-1_DW-3, ... of the first information I-1, respectively, so that optionally further data packets DP-2, DP-3, ... are obtained and transmitted.
[0039] In a further exemplary embodiment shown in Figure 3, it is assumed that the amount of data DM-1 used to represent portions of the first information I-1_DW-1, I-1_DW-2, I-1_DW-3,… is 20% or less of the amount of data DM-2 used to represent at least one data value DW-1, DW-2, DW-3,… for example, 5% or less, or 1% or less. For this reason, the reference codes DP-1, DP-2, DP-3 in Figure 3 represent exemplary data packets by symbol. This shows that the proportion of each portion of the first information I-1 in all data packets DP-1, DP-2, DP-3,… is relatively small, and therefore, in a further exemplary embodiment, this prevents interference with the transmission of the data values DW-1, DW-2, DW-3,… themselves.
[0040] In a further exemplary embodiment shown in Figure 4, the method is assumed to include: obtaining a first piece of information I-1-n for each nth data value DW-n of a data source 100 (Figure 6), where n > 8, and for example n is a power of 2; distributing the first piece of information I-1-n to m data values DW-n, DW-n+1, ..., where m >= 2, and for example m = n; and transmitting each of the m data values DW-n, DW-n+1, ... together with, for example, the mth portion of the distributed first piece of information I-1-n, 214.
[0041] For example, in a further exemplary embodiment, the data source 100 (Figure 6) can repeatedly supply data values, for example periodically, at a rate of 2 kHz, i.e., it can repeatedly supply 2000 data values per second. For example, for every 128th data value, a first piece of information I-1 may be formed, for example, in the form of a 128-bit CMAC. For example, this 128-bit CMAC can be divided into 128 parts, each of which is 1 bit, and each of these parts is transmitted, for example, along with a data value to at least one further unit 100b. Thus, after receiving 128 data values along with each part of the first piece of information I-1, the further unit 100b has all 128 parts of the first piece of information I-1, so it can perform, for example, a local check of the data values underlying the 128-bit CMAC.
[0042] In further exemplary embodiments, the portion of the first information I-1 may have a different size than the single bit exemplified above, for example, two or more bits.
[0043] In a further exemplary embodiment shown in Figure 5, the method provides the following elements: 220 a first key K-1 (e.g., a symmetric key for CMAC formation) for obtaining, for example, first information I-1; 221 a second information I-2 for obtaining, for example, first information I-1; 222t a first data value DW-1; 223 a first information I-1 based on the first key K-1, second information I-2 and first data value DW-1; and 223 a first information I-1 It is assumed that the method includes dividing the first information I-1 into n parts I-1_DW-1, I-1_DW-2, ..., I-1_DW-n 224, transmitting each of the n data values DW-1, DW-2, ... together with, for example, each part I-1_DW-1, I-1_DW-2, ... to at least one further unit 100b 225, and optionally repeating at least several embodiments 221, 222, 223, 224, 225 for, for example, at least one further data value and the part to which the first information belongs 226.
[0044] Figure 6 schematically shows block diagrams of configurations 100a and 100b according to exemplary embodiments, and their components have already been described illustratively in the above description.
[0045] For example, the sensor device 100a may have a device 300a to perform, for example, an embodiment relating to transmitting data, as shown in at least one of Figures 1 to 5 and / or as shown in at least one of claims 1 to 7.
[0046] For example, the control device 100b may have a device 300b to perform at least some aspects according to the embodiment, for example, an aspect relating to data reception, as shown in Figures 7 and / or 8.
[0047] A further exemplary embodiment in Figure 7 relates to a method for receiving data associated with a data source 100 (Figure 6), for example, a sensor device 100a, for example, a sensor device 100a for an automobile 10, for example, a computer-implemented method, wherein the method receives a plurality of data values DW-1, DW-2, DW-3, ... 250 (Figure 7), wherein at least some of the plurality of data values DW-1, DW-2, DW-3, ... each contains a first piece of information I-1 or a portion of the first piece of information I-1 I-1_DW-1, I-1 _DW-2,… (see, for example, Figure 1 and / or Figure 5) are assigned, and the first information I-1 enables verification of the reliability and / or integrity of at least one first data value DW-1 that is available and / or received by the data source 100, 250 and includes aggregating these portions of the first information I-1, I-1_DW-1, I-1_DW-2,… into the first information I-1 (Figure 7), 252 and verifying the reliability and / or integrity of at least one data value DW-1 based on the first information I-1, 254. The method shown in Figure 7 can be implemented, for example, in at least one further unit (e.g., a control device) 100b (Figure 6), where, for example, according to the principle of the embodiment, the transmitted data value (see arrow A1 in the block) is received by the sensor device 100a along with the respective associated portions of the first information I-1.
[0048] A further exemplary embodiment shown in Figure 8 relates to an apparatus 300 for carrying out the method according to the embodiment.
[0049] In further exemplary embodiments, the apparatus 300 is envisioned to have a computing device ("computer") 302 and a memory device 304 associated with the computing device 302 for temporarily storing at least one of the following elements: a) data DAT (for example, data characterizing data values DW-1, DW-2, ... and / or first information I-1 and / or second information I-2), and b) a computer program PRG for carrying out, for example, the method according to the embodiment.
[0050] In further exemplary embodiments, the memory device 304 includes volatile memory (e.g., main memory (RAM)) 304a and / or non-volatile (NVM) memory (e.g., flash EEPROM) 304b, or a combination thereof, or a combination with other memory types not expressly mentioned.
[0051] A further exemplary embodiment relates to a computer-readable storage medium SM, which includes instructions PRG to cause the computer 302 to carry out the method according to the embodiment when executed by the computer 302.
[0052] A further exemplary embodiment relates to a computer program PRG, which includes instructions to cause the computer 302 to carry out the method according to the embodiment when the program PRG is executed by the computer 302.
[0053] Further exemplary embodiments relate to a data carrier signal DCS that characterizes and / or transmits a computer program PRG according to the embodiment. The data carrier signal DCS can be received, for example, via an optional data interface 306 of the device 300.
[0054] For example, the apparatus 300a and / or 300b shown in Figure 6 may have the configuration and / or functions of the apparatus 300 shown in Figure 8.
[0055] Further exemplary embodiments shown in Figure 9 relate to a sensor device 100a having at least one device 300 (Figure 8) (or 300a in Figure 6) according to the embodiment, for example, a sensor device 100a for an automobile 10.
[0056] Further exemplary embodiments shown in Figure 9 relate to a control device 100b having at least one device 300 (Figure 8) (or 300b in Figure 6) according to the embodiment, for example, a control device 100b for an automobile 10.
[0057] Further exemplary embodiments in Figure 9 relate to a technical product, such as an automobile 10, comprising at least one device 300 (Figure 8) according to the embodiment and / or at least one sensor device 100a and / or at least one control device 110b according to the embodiment.
[0058] Figure 10 schematically shows a simplified block diagram of a further exemplary embodiment. Element E10 symbolically represents a sensor device at least similar to element 100a in Figure 6, for example, and element E20 in Figure 10 symbolically represents a control device at least similar to element 100b in Figure 6, for example.
[0059] For example, element E10 symbolically represents a sensor device for the steering system of the automobile 10 (Figure 9), and element E20 symbolically represents a control device for processing the data values DW-1, DW-2, DW-3, ... from the sensor device E10.
[0060] Element E11 symbolically represents an interface for transmitting data, such as data values, from the sensor device E10 to the control device E20. For example, interface E11 is configured as a SENT interface.
[0061] Element E12 represents, for example, measurement data obtained by data source 100 (Figure 6) in the form of multiple data values DW-1, DW-2, ..., using symbols. This is obtained, for example, as data words, each having 12 bits, at a rate of, for example, 2 kHz.
[0062] Element E13 in Figure 10 is symbolically represented as forming first information I-1 in the form of a MAC, for example, a CMAC (cipher-based MAC), for example, a 128-bit CMAC, which is formed, for example, based on at least one data value in block E12, and also based on optional second information, such as that which can be provided by block E14 (for example, in the form of a “freshness calculation” or “Salt”) based on at least one pseudorandom value that can be provided by an optional pseudorandom number generator E15.
[0063] Element E16 symbolically represents the symmetric key for the formation of the CMAC E13. For the purpose of examining the first information received or recovered by the control device E20, the control device E20 also has the symmetric key E16 (for example, by configuration or parameterization within the scope of manufacture of components E10, E20, and / or by preceding data transmission from component E10 to component E20).
[0064] In a further exemplary embodiment, block E13 is configured to form a 128-bit CMAC for every 288th data value of the measurement data E12 and supply this to block E11 for division into, for example, 128 different data values, which are transmitted to control device E20 in the form of, for example, 128 data packets, along with, for example, the proportion of each bit of the CMAC.
[0065] The SENT interface E21 of the control unit E20 receives these data packets, separates the data values contained therein (e.g., 12-bit data words) from the CMAC (each having 1 bit), provides the separated data values (see element E22), and aggregates this 128-bit CMAC based on, for example, 128 received data packets (see element E23).
[0066] Element E24 symbolically represents checking CMAC E23 based on the symmetric key E26 and second information that can be formed by element E25 (e.g., a "freshness calculation," or, for example, finding a Salt similar to or identical to element E14). Element E26 symbolically represents an initialization value (e.g., a seed value) for element E25 that can be sent, for example, from element E10 to element E20 during the activation of elements E10 and E20. For example, the initialization value E26 is identical to a pseudorandom value that can be provided by an arbitrarily selected pseudorandom number generator E15. The freshness calculation or Salt E14 further enhances security because, in this way, it is possible to prevent, for example, the repetition of CMAC values based on the same measurement data or data values.
[0067] In further exemplary embodiments, the formation of a MAC, such as a CMAC, is performed, for example, on a hardware basis. For this purpose, in further exemplary embodiments, the transmitting side (e.g., element 100a or E10) and / or the receiving side (e.g., element 100b or E20) may be provided, for example, with a hardware accelerator for cryptographic primitives, for example, in the form of a hardware security module (HSM) (see also Figure 8). For example, the hardware accelerator for cryptographic primitives may be implemented, for example, in an application-specific integrated circuit (ASIC).
[0068] The following describes exemplary configurations or further exemplary embodiments and models. These, according to further exemplary embodiments, can be combined with at least one of the embodiments described above, either individually or in any combination.
[0069] In further exemplary embodiments, the symmetric key E16 is stored in both the sensor device E10 and the control device E20, for example, within a production frame.
[0070] After the control device E20 is started, for example after startup, the control device E20 also starts, for example, the connected sensor device E10. During the initialization of the sensor-control device-communication A1 (Figure 6), the sensor device E10 generates a random value using, for example, element E15, which can be used for freshness calculation or salt value initialization (for example, in the sense of second information I-2). This random value is transmitted from the sensor device E10 to the control device E20 during the initialization phase, for example.
[0071] In a further exemplary embodiment, the freshness calculation by element E14 is implemented, for example, as an increment of an initial random value.
[0072] In a further exemplary embodiment, the sensor device E10 begins detecting measurement data, for example, following an initialization phase. For example, the nth measurement, for example, each nth measurement, is associated with the current value from the freshness calculation E14, for example, concatenated. The value thus generated is hereafter referred to as the MAC input.
[0073] In a further exemplary embodiment, from the MAC input, a MAC, for example CMAC, is calculated using the introduced symmetric key E16, based on or in accordance with, for example, AES CMAC, according to, for example, NIST Special Publication 800-38B (see, for example, https: / / doi.org / 10.6028 / NIST.SP.800-38B).
[0074] In further exemplary embodiments, the MAC is preferably implemented using hardware, for example, a hardware accelerator for cryptographic primitives.
[0075] In a further exemplary embodiment, the MAC is divided into, for example, 128 fragments, each, for example, of 1 bit in length, and transmitted to the control unit E20 in 128 messages, for example, data packets DP-1, DP-2, ... (along with corresponding data values DW-1, DW-2, ...).
[0076] In a further exemplary embodiment, the control device E20 stores, at least temporarily, the received measured value or data value DW-1 to be verified, and calculates a comparison MAC based on the received data value DW-1, the introduced key E16, and optionally the current freshness value E25.
[0077] In a further exemplary embodiment, the control device E20 combines 128 received fragments (parts of the first information I-1), each one bit in length, to form a reconstructed MAC.
[0078] In a further exemplary embodiment, the control device E20 compares the comparison MAC with the reconstructed MAC. If the two MAC values match, in a further exemplary embodiment, it may be assumed, for example, that the obtained measured or data value DW-1 has been reliably transmitted with respect to integrity, reliability (and optionally freshness).
[0079] Further exemplary embodiments in Figure 11 relate to methods and / or apparatus 300, 300a, 300b and / or sensor apparatus 100a, E10 and / or control device 100b, E20 and / or technical product 10 and / or computer-readable storage medium SM and / or computer program PRG and / or data carrier signal DCS used in embodiments for at least one of the following elements: a) protection of the integrity and / or reliability of data associated with data source 100, e.g., protection by encryption, b) identification of attacks on data connection A1 between data source 100 and at least one further unit 100b, c) distribution of first information I-1 to multiple data packets DP-1, DP-2, DP-3, ... 403 and d) prevention of unauthorized introduction of data into data connection A1 between data source 100 and at least one further unit 100b, 404.
Claims
1. A method for transmitting data associated with a data source (100), for example, a sensor device (100a), for example, a sensor device (100a) for an automobile (10), for example, a computer-implemented method, The aforementioned method, To obtain (200) first information (I-1) that enables verification of the reliability and / or completeness of at least one data value (DW-1) that can be provided by the data source (100), Transmitting multiple data values (DW-1, DW-2, DW-3, ...) to at least one further unit (100b) (202; A1), Includes, A method for transmitting at least some of the aforementioned plurality of data values (DW-1, DW-2, DW-3, ...) together with each part of the first information (I-1) (I-1_DW-1, I-1_DW-2, I-1_DW-3, ...).
2. Obtaining the first information (I-1) (200) includes at least forming at least one message authentication code, for example, a message authentication code, MAC, based on the at least one data value (DW-1) (200a), For example, the method according to claim 1, wherein the message authentication code is of type CMAC having a length of, for example, 128 bits or more, in accordance with Chapter 6.2 of https: / / doi.org / 10.6028 / NIST.SP.800-38B.
3. The method includes forming the first information (I-1) based on the at least one data value (DW-1) and the second information (I-2) (200b), For example, the second piece of information (I-2) includes at least one of the following elements: a) a random value, b) a pseudo-random value, and c) the counter value (ZW) of the counter (102). For example, the method according to claim 1, wherein the counter (102) can be repeatedly initialized, for example, based on a random value or a pseudo-random value, when, for example, an apparatus for carrying out the method (100a; 100b; 300; 300a; 300b) is activated.
4. Transmitting the plurality of data values (DW-1, DW-2, DW-3, ...) to at least one further unit (100b) (202) To generate a first data packet (DP-1), the first data value (DW-1) of the plurality of data values (DW-1, DW-2, DW-3, ...) is combined (202a), for example, concatenated, Transmitting the first data packet (DP-1) to at least one further unit (100b) (202b), Selectively, the combination (202a) and transmission (202b) are repeated (202c) for at least one further data value (DW-2, DW-3, ...), The method according to claim 1, including the method described in claim 1.
5. The method according to claim 1, wherein the amount of data (DM-1) used to represent the portion (I-1_DW-1) of the first information (I-1) is 20% or less, for example 5% or less, and for example 1% or less, of the amount of data (DM-2) used to represent the at least one data value (DW-1).
6. The aforementioned method, The first information (I-1-n) is obtained for each nth data value (DW-n) of the data source (100) (210), where n > 8, and for example, n is a power of 2 (210), The first information (I-1-n) is distributed to m data values (DW-n, DW-n+1, ...) (212), where m >= 2, and for example m = n (212), Transmitting the m data values (DW-n, DW-n+1, ...) together with each portion of the distributed first information (I-1-n) (214), The method according to claim 1, including the method described in claim 1.
7. The above method comprises the following elements, namely, For example, providing a first key (K-1) in order to obtain the first information (I-1) (200; 223) (220), Providing second information (I-2) (221), that is, providing the second information (I-2) (221) in order to obtain the first information (I-1) (200; 223), Determining the first data value (DW-1) (222), Determining the first information (I-1) based on the first key (K-1), the second information (I-2), and the first data value (DW-1) (223), The first information (I-1) is divided into n parts (I-1_DW-1, I-1_DW-2, ..., I-1_DW-n, ...) (224), Transmitting n data values (DW-1, DW-2, ..., DW-n) together, for example, with each part of the first information (I-1) (I-1_DW-1, I-1_DW-2, ..., I-1_DW-n) to at least one further unit (200b) (225), Selectively repeating at least several embodiments (221, 222, 223, 224, 225) for, for example, at least one further data value (226), The method according to claim 1, comprising at least one of the following.
8. A method for receiving data associated with a data source (100), for example, a sensor device (100a), for example, a sensor device (100a) for an automobile (10), for example, a computer-implemented method, The aforementioned method, Receiving a plurality of data values (DW-1, DW-2, DW-3, ...) (250), wherein at least some of the plurality of data values (DW-1, DW-2, DW-3, ...) are each assigned a portion of first information (I-1) (I-1_DW-1, I-1_DW-2, I-1_DW-3, ...), and the first information (I-1) enables verification of the reliability and / or completeness of at least one first data value (DW-1) that is available and / or received by the data source (100) (250), The above-mentioned portion (I-1_DW-1, I-1_DW-2, I-1_DW-3, ...) of the first information (I-1) is aggregated into the first information (I-1) (252), (254) Examining the reliability and / or completeness of the at least one first data value (DW-1) based on the first information (I-1), Methods that include...
9. Apparatus for carrying out the method described in any one of claims 1 to 8 (300; 300a; 300b).
10. A sensor device (100a) having at least one device (300; 300a) as described in claim 9, for example, a sensor device (100a) for an automobile (10).
11. A control device (100b) having at least one device (300; 300b) as described in claim 9, for example, a control device (100b) for an automobile (10).
12. A technical product comprising at least one device (300; 300a; 300b) as described in claim 9, for example, an automobile (10).
13. A computer-readable storage medium (SM) containing instructions (PRG) that cause the computer (302) to carry out the method according to any one of claims 1 to 8 when executed by the computer (302).
14. A computer program (PRG), A computer program (PRG) that includes instructions to cause the computer (302) to perform the method according to any one of claims 1 to 8 when the program (PRG) is executed by the computer (302).
15. A data carrier signal (DCS) for transmitting and / or characterizing a computer program (PRG) according to claim 14.
16. Use of the method according to any one of claims 1 to 8 (400) for at least one of the following elements, namely a) protection of the integrity and / or reliability of data associated with a data source (100) (401), such as protection by encryption; b) identification of an attack on the data connection between the data source (100) and at least one further unit (100b) (402); c) distribution of first information (I-1) into multiple data packets (403); d) prevention of unauthorized introduction of data into the data connection between the data source (100) and at least one further unit (100b) (404).