Locking and unlocking the communication interface of electronic devices for powered vehicles.

Abstract

To lock the communication interface of an electronic device (1) for a powered vehicle, a first identifier (3) is determined, which characterizes a hardware component or a software component of a computing unit (2) on the production line in which the electronic device (1) was produced. A second identifier (4) characterizing the electronic device (1) is obtained. A first input value for a predetermined key derivation function is generated by the computing unit (2) based on the first identifier (3), and a second input value for the key derivation function is generated based on the second identifier (4). A key is generated by the computing unit (2) using the key derivation function based on the first and second input values, and the communication interface is locked using the key.

Description

Technical Field

[0001] The invention relates to a method for locking a communication interface of an electronic device for a motor vehicle and a corresponding method for unlocking the communication interface of an electronic device for a motor vehicle. The invention also relates to a data processing device and a computer program product.

Summary of the Invention

[0002] An electronic device for a motor vehicle can have communication interfaces for different purposes, such as a control unit or a sensor. Appropriately, as soon as the electronic device is used for normal operation after production, it may be desirable to invalidate such a communication interface for safety reasons or to avoid misuse. This may apply especially to a troubleshooting interface, also known as a debug interface, such as a JTAG interface. Such communication interfaces are used during production, for example, for software installation of the electronic device and / or for testing or troubleshooting the software of the electronic device. They are not normally required during normal operation and can therefore be locked, especially by password protection.

[0003] However, after production, it may also be necessary to access the electronic device via the communication interface, for example, for troubleshooting or for changing the software stored in the electronic device or for storing or reading other data. Therefore, in order to obtain access, the user may need to enter the correct password.

[0004] Reference US2017 / 0090909A1 describes a method for securely writing patch code to the memory of an SoC. The JTAG interface may be used to check the functionality of the SoC. The JTAG interface may be unlocked by the SoC manufacturer by entering an interface password. In the password-locked state, no values ​​stored in the components of the SoC and / or any other functionality of the SoC can be modified via the JTAG interface.

[0005] The object of the present invention is to provide secure access protection for communication interfaces of electronic devices for power vehicles.

[0006] This objective is achieved by the subject matter of each independent claim. Advantageous improvements and preferred embodiments are the subject matter of dependent claims.

[0007] The invention is based on the idea of ​​locking a communication interface using a key, or in simplified terms, a password, which is derived from an identifier assigned to an individual electronic device on the one hand, and from at least one identifier assigned to a hardware or software component of a computing unit originating from the production line in which the electronic device was manufactured on the other hand. The component-specific identifier mentioned first and the production line-specific identifier mentioned last allow the key to be retrospectively reconstructed. Two-factor authentication is also implemented for enhanced security.

[0008] According to one aspect of the invention, a method for locking a communication interface of an electronic device for a powered vehicle is specified, for example, a computer implementation method. In this case, a first identifier is determined, which characterizes a hardware component or a software component of a computing unit on a production line in which the electronic device was produced. The first identifier is determined in particular by the computing unit. A second identifier is obtained, in particular by the computing unit, which characterizes the electronic device, in particular uniquely. Based on the first identifier, the computing unit generates a first input value for a predetermined key derivation function, and based on the second identifier, a second input value for the key derivation function is generated. A key, in particular a cryptographic key, is generated by the computing unit using the key derivation function based on the first and second input values. The communication interface is locked using the key, preferably automatically, in particular by the computing unit.

[0009] The first identifier is such that the individual hardware or software component being characterized can be clearly determined from the knowledge of the first identifier. For example, it could be a serial number or something similar. The same applies to the second identifier; if the second identifier is known, the individual electronic device it characterizes can be uniquely determined. This, too, could be a serial number or something similar.

[0010] Depending on the embodiment, the first input value may be identical to the first identifier, or the first input value may be derived from the first identifier according to a predetermined rule. In various embodiments, in addition to the first identifier, it is possible to determine one or more further first identifiers of software or hardware components or one or more further hardware or software components of computing units, and the first input value may be derived or calculated based on the first identifier and the further identifiers.

[0011] The same applies to the second identifier or the second input value. Therefore, the second input value may be identical to or deriveable from the second identifier, and may be derived based on a second identifier characterizing an electronic device and one or more further second identifiers.

[0012] If additional first identifiers are used for further hardware or software components in addition to the first identifier, the corresponding further hardware or software component may be uniquely determined from the additional first identifier. If one or more additional second identifiers are used, they may also enable the unique determination of an electronic device, depending on the embodiment. However, this is not always the case, and therefore the additional second identifiers may be ambiguous, in contrast to the second identifier. For example, the additional second identifiers may include a model identifier, production period, lot number, production site, and other information related to the electronic device.

[0013] The key derivation function is designed to uniquely derive a corresponding key from, for example, two distinct input values, namely the first input value and the second input value in this example; therefore, in this case, it is a function of two variables. Thus, identical input values ​​always yield the same key. Depending on the embodiment, the two input values ​​may be combined or combined by an operation to produce a common input value, and the key derivation function generates a key from the common input value; therefore, in this case, it is a function of one variable.

[0014] By locking a communication interface with a key, the communication interface is placed in a locked or encrypted state, preventing external users from accessing the electronic device through the communication interface. The communication interface can be unlocked, i.e., placed in an unlocked or decrypted state, by entering the key used to lock it through the communication interface or a further interface of the electronic device.

[0015] A communication interface is a communication interface for wired communication, particularly between an external computing unit and the processor, memory element, or other components of an electronic device. The communication interface includes, in particular, hardware interfaces and / or software interfaces.

[0016] Therefore, the method according to the invention achieves a high level of security against unauthorized or unwanted access to electronic devices via a communication interface by using a first identifier and a second identifier as two mutually independent elements for generating a key. By using the second identifier, a unique association between the generated key and individual electronic devices is achieved. The content of the first identifier is independent of this and, in particular, cannot be easily identified by a party accessing the communication interface without authorization. Furthermore, however, if the method according to the invention is known, the key can be reliably reconstructed when the communication interface must be unlocked.

[0017] Furthermore, in the method according to the invention, a first identifier is used that is based on a hardware or software component of a key generation computing unit, which is also used to derive input values ​​for a key derivation function and to generate a key based thereon. In this way, security can be further enhanced.

[0018] The computing unit is part of the production line in which the electronic device is produced. This specifically means that steps for the production of the electronic device are performed by the computing unit, for example, to configure the electronic device with software and / or to test the software, before the method according to the invention is carried out.

[0019] A computing unit can be understood to mean a data processing device that includes processing circuits in particular. Therefore, a computing unit may process data in order to perform arithmetic operations. Optionally, these may also include operations to perform indexed access to data structures, such as lookup tables (LUTs).

[0020] A computing unit may include, in particular, one or more computers, one or more microcontrollers and / or one or more integrated circuits, such as one or more application-specific integrated circuits (ASICs), one or more field-programmable gate arrays (FPGAs) and / or one or more system-on-a-chip (SoCs). A computing unit may also include one or more processors, such as one or more microprocessors, one or more central processing units (CPUs), one or more graphics processing units (GPUs) and / or one or more signal processors, in particular one or more digital signal processors (DSPs). A computing unit may also include physical or virtual computer groups or other types of the aforementioned units.

[0021] In various exemplary embodiments, the computing unit includes one or more hardware and / or software interfaces and / or one or more storage units.

[0022] The storage unit may be configured as volatile data memory, such as dynamic random access memory (DRAM) or static random access memory (SRAM), or as non-volatile data memory, such as read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), flash memory or flash EEPROM, ferroelectric random access memory (FRAM), magnetoresistive random access memory (MRAM), or phase-change random access memory (PCRAM).

[0023] According to at least one embodiment of a method for locking a communication interface, the electronic device is at least partially programmed and / or tested by a computing unit prior to the determination of a first identifier, and / or software installation on the electronic device is performed by the computing unit prior to the determination of a first identifier, and / or troubleshooting of the electronic device is performed by the computing unit.

[0024] The aforementioned steps can be considered part of the production of an electronic device. At least some of these may be performed via a communication interface. In this case, the computing unit is connected to the electronic device via the communication interface and may remain connected thereafter, for example, to automatically use a key to lock the communication interface.

[0025] According to at least one embodiment, the communication interface is a troubleshooting interface for an electronic device.

[0026] In the case of such a troubleshooting interface, also referred to as a debug interface, the use of the invention is particularly advantageous, since these can be used in the case of a warranty or an error on site so that access to the electronic device can be obtained again after the actual production of the electronic device.

[0027] For example, the troubleshooting interface is standardized according to the industrial standard IEEE 1149.1, generally referred to as JTAG (joint test action group).

[0028] According to at least one embodiment, the second identifier is determined based on the serial number of the electronic device.

[0029] For example, the second identifier can be identical to the serial number of the electronic device, or the second identifier can be determined based on the serial number and additional component-specific information.

[0030] On the one hand, the serial number of the electronic device is suitable for uniquely determining the electronic device, and on the other hand, the serial number is generally electronic or analog and is present on the electronic device even after the actual production, for example in the form of a character string or in the form of an optically or electronically readable code.

[0031] According to at least one embodiment, the first identifier is determined based on the serial number of the hardware components of the computing unit and / or based on the serial number of the software components of the computing unit.

[0032] The hardware components can be, for example, the main circuit board, also referred to as the motherboard, the computing unit, or the data memory of the computing unit, for example an SSD drive or an HDD drive. The software components can be, for example, the operating system or the firmware of the computing unit, for example BIOS firmware.

[0033] For example, the serial numbers of hardware or software components may be automatically read and determined by the computing unit itself, thereby further enhancing the security of the method.

[0034] According to at least one embodiment, a further first identifier is determined, which characterizes a further hardware component or a further software component of the computing unit, in particular, by the computing unit. A first input value is generated based on the first identifier and the further first identifier.

[0035] For example, in a further embodiment, more than one additional first identifier may be determined and may be processed in a similar manner accordingly. To generate a first input value, the first identifier and the additional first identifier may be concatenated with each other, or linked with each other via a logical operation such as an XOR operation or via any other arbitrary rule. In this way, the security of the key is further improved.

[0036] According to at least one embodiment, the key is generated with a bit length of at least 32 bits or at least 64 bits. This can achieve a high level of security.

[0037] According to at least one embodiment, the electronic device is a sensor for a powered vehicle or an electronic control unit for a powered vehicle.

[0038] The electronic control unit (ECU) may also be configured as a zone control unit (ZCU) or a domain control unit (DCU).

[0039] The sensors may be, for example, environmental sensors such as cameras, lidar systems, radar systems, or ultrasonic sensor systems, or further sensors for the powered vehicle such as steering angle sensors, acceleration sensors, inertial measurement units, IMUs, etc.

[0040] Electronic control units and sensors for powered vehicles are, in part, highly safety-related components that must be reliably protected against unwanted or unauthorized access, and authorized access must still be possible after production. The invention has a particularly advantageous effect in this regard.

[0041] According to at least one embodiment of the method, at least one historical dataset is provided on a storage device. Each historical dataset of the at least one historical dataset includes corresponding historical identification information for a hardware or software component of a computing unit and a production period associated with the historical identification information. The latest historical identification information of the latest historical dataset among the at least one historical dataset is read from the storage device, in particular by the computing unit. The latest historical identification information is associated with the latest production period. The latest historical first input value is determined based on the latest historical identification information.

[0042] A hash value is generated based on the first input value, in particular by the computing unit, using a predetermined hash function. A further hash value is generated, in particular by the computing unit, using a hash function, based on the most recent historical first input value. The computing unit checks whether the hash value matches the further hash value. If the hash value does not match the further hash value, a further historical dataset is stored on the storage device, in particular by the computing unit. The further historical dataset includes the first input value and the production period associated with the first input value, or the further historical dataset includes the first identifier and the production period associated with the first identifier.

[0043] In particular, each history dataset includes either a corresponding history first input value or a corresponding history first identifier for the key derivation function as its respective history identification information. In the former case, the latest history first input value is determined by reading it from the corresponding latest history dataset. In the latter case, the latest history first identifier is read from the corresponding latest history dataset, and based on this, the latest history first input value is determined, in particular with respect to the generation of the first input value as described above.

[0044] Therefore, the historical identification information directly or indirectly characterizes the historical software or hardware components that were present in the computing unit during the corresponding associated production period. The most recent historical production period can be understood as a period in which no more recent production periods exist within at least one historical dataset. The most recent historical dataset is a historical dataset containing the most recent production period, and the most recent historical identification information is included in the most recent historical dataset.

[0045] Storage devices are storage devices that are provided outside of the computing unit, which means they represent a particularly secure, access-restricted environment.

[0046] If the hash value matches the additional hash value, this means that the first input value matches the latest history first input value, or the first identifier matches the latest history first identifier. This means that the hardware or software component of the computing unit characterized by the first identifier or first input value corresponds to the software or hardware component of the computing unit characterized by the latest history first input value or latest history identifier.

[0047] Therefore, if at least one historical dataset on the storage device is used to reconstruct the password for unlocking the communication interface of an electronic device, it can be assured that all the necessary information is stored on the storage device. If this is not the case, i.e., if the hash value does not match any further hash values, the method for locking the communication interface or generating the key may be suspended until further historical datasets are stored on the storage device and the corresponding test step can be run again. Once it is run again, the hash value will match any further hash values.

[0048] In particular, the hash value is generated independently of the latest history first input value, or based solely on the first input value. Similarly, the additional hash value is generated independently of the first input value, or based solely on the latest history input value.

[0049] Hash functions, in particular cryptographic hash functions, include, for example, the SHA-2 function and especially the SHA-256 function.

[0050] Although not explicitly stated herein, the method may, in accordance with its provisions, output an error message and / or request user feedback input and / or set default settings and / or predetermined initial states for any applicable cases or situations that may arise from the method.

[0051] According to a further aspect of the invention, a method for unlocking a communication interface of an electronic device for a powered vehicle is identified, the electronic device being locked by the method according to the invention for locking the communication interface. According to the method for unlocking the communication interface, at least one history dataset is provided to a storage device, in particular an external storage device, and each history dataset of the at least one history dataset includes corresponding history identification information and a production period associated with the history identification information. A device identifier characterizing the electronic device having a communication interface to be unlocked is determined, and based on the device identifier, the production period of the electronic device having a communication interface to be unlocked is determined, in particular by a further computing unit.

[0052] Based on the production period determined in this way, one of the historical datasets is selected, in particular by a further computing unit, which corresponds to the production period determined based on the device identifier. Based on the historical identification information of the selected historical dataset, a first historical input value for the key derivation function is generated, in particular by a further computing unit. Based on the device identifier, a second current input value for the key derivation function is generated, in particular by a further computing unit. Using the key derivation function, the key is reconstructed, in particular by a further computing unit, based on the first historical input value and the second current input value. The communication interface is unlocked, in particular by a further computing unit, using the reconstructed key.

[0053] For the relationship between the history identification information, the first history input value, and the history identifier, please refer to the method for locking the communication interface described above.

[0054] In this way, there is no need to store the key itself, and the possibility of unlocking the communication interface is identified, which allows for the reliable reconstruction of the key for all production periods and all associated electronic devices.

[0055] Although not explicitly stated here, the method may include, in relation to possible application cases or situations, the output of an error message and / or a request for user feedback, and / or the setting of default settings and / or a predetermined initial state.

[0056] According to a further aspect of the invention, a data processing device is identified having a computing unit configured to perform a method according to the present invention for locking a communication interface of an electronic device for a powered vehicle.

[0057] According to a further aspect of the invention, a further data processing device having a further computing unit is identified, the further computing unit being configured to perform a method according to the present invention for unlocking a communication interface of an electronic device for a powered vehicle.

[0058] According to a further aspect of the invention, a computer program having a command is identified, and when the command is executed by a data processing device, in particular a data processing device according to the invention, the data processing device is made to execute a method according to the invention for locking a communication interface of an electronic device for a powered vehicle.

[0059] Commands can exist, for example, as program code. Program code can be provided, for example, as binary code or assembly language and / or as source code in a programming language, such as C, and / or as a program script, such as Python.

[0060] According to a further aspect of the invention, a further computer program having further commands is identified, which, when executed by a further data processing device, in particular a further data processing device according to the invention, causes the further data processing device to execute a method according to the invention for unlocking a communication interface of an electronic device for a powered vehicle.

[0061] Further commands may exist, for example, as program code. Program code may be provided, for example, as binary code or assembly language and / or as source code in a programming language, such as C, and / or as a program script, such as Python.

[0062] According to a further aspect of the invention, a computer-readable storage medium is specified, the latter storing a computer program according to the present invention or a further computer program according to the invention.

[0063] Computer programs, further computer programs, and computer-readable storage media may each be considered computer program products having commands or further commands.

[0064] Further features of the invention will become apparent from the claims, drawings, and descriptions of the drawings. The features and combinations of features described above, as well as the features and combinations of features described and / or shown in the descriptions of the drawings below, may be included in the invention not only in the combinations specified in each case, but also in other combinations. In particular, embodiments and combinations of features that do not have all the features of the original claims may also be included in the invention. Furthermore, embodiments and combinations of features that exceed or differ from the combinations of features indicated in the references of the claims may also be included in the invention.

[0065] The invention will be described in further detail below based on specific exemplary embodiments and related schematic drawings. In the drawings, identical or functionally identical elements may be given the same reference numerals. Descriptions of identical or functionally identical elements may not necessarily be repeated with respect to different drawings. [Brief explanation of the drawing]

[0066] The following is schematically shown in the drawing: [Figure 1] Figure 1 shows a flowchart illustrating an exemplary embodiment of a method according to the invention for locking the communication interface of an electronic device for a powered vehicle. [Figure 2] Figure 2 shows a flowchart of a further exemplary embodiment of the method according to the invention for locking the communication interface of an electronic device for a powered vehicle. [Figure 3] Figure 3 shows a flowchart of a further exemplary embodiment of the method according to the invention for unlocking the communication interface of an electronic device for a powered vehicle. [Modes for carrying out the invention]

[0067] Figure 1 shows a schematic flowchart of an exemplary embodiment of the method according to the invention for locking the communication interface of an electronic device 1 for a powered vehicle, such as a control unit or a sensor.

[0068] Electronic device 1 was produced on a production line having a computing unit 2, for example, a programming station. The computing unit 2 performed, for example, software installation and / or troubleshooting of electronic device 1, and / or the electronic device was tested by the computing unit 2.

[0069] The electronic device 1 has a communication interface, in particular a troubleshooting interface, such as a JTAG interface, which can be locked or unlocked by an encryption key.

[0070] In step 100, a first identifier 3 is determined, in particular by the computing unit 2, which characterizes a hardware component that characterizes the computing unit 2, such as an SSD memory or a main circuit board, or a software component that characterizes the computing unit 2, such as an operating system or firmware. For example, the first identifier 3 may be the serial number of a hardware component or a software component. Optionally, at least one further first identifier may be determined, which characterizes at least one further hardware component and / or at least one further software component of the computing unit 2.

[0071] In step 120, the computing unit 2 obtains a second identifier 4 that characterizes the electronic device 1, for example, the serial number of the electronic device 1. The computing unit 2 can automatically determine the second identifier 4, for example, if it is electronically stored on the electronic device 1, or a user can provide the second identifier to the computing unit 2 via an input device, such as a keyboard or an optical reader or RFID reader. Optionally, the optical reader or RFID reader may be positioned so that the second identifier 4 can be read automatically in this manner.

[0072] In step 140, the computing unit 2 generates a first input value for a given key derivation function based on the first identifier 3. If at least one further first identifier is determined, the computing unit 2 generates a first input value based on the first identifier 3 and on at least one further first identifier. For example, the computing unit 2 may concatenate the first identifier 3 with at least one further first identifier, or link them via a logical operation such as an XOR operation to generate a first input value, or convert it to a first input value through further operations. The computing unit 2 generates a second input value for the key derivation function based on the second identifier 4.

[0073] In step 160, the computing unit 2 applies a key derivation function to the first and second input values ​​to generate a key. In step 180, the communication interface is locked using the key, and is automatically locked by the computing unit 2. Specifically, the computing unit 2 is connected to the communication interface of the electronic device 1 or a further communication interface for this purpose.

[0074] Figure 2 shows a schematic flowchart of a further exemplary embodiment of the method for locking a communication interface according to the invention, based on the embodiment of Figure 1.

[0075] First, step 100 is performed again. At least one historical dataset is stored on the storage device 5, which is provided specifically outside the computing unit 2. For simplicity, we will assume below that the storage device stores multiple such historical datasets; the procedure is the same if there is only one historical dataset. Each historical dataset includes corresponding historical identification information for a hardware or software component of the computing unit 2, and the production period associated with the historical identification information. With respect to different production periods, this may include different hardware or software components, but they always have the same function in the computing unit 2. Therefore, they are still referred to as "that" hardware component or "that" software component.

[0076] In particular, each production period is unique, which allows them to be uniquely arranged in chronological order. Thus, one of the production periods is uniquely the most recent production period. The associated historical dataset is called the most recent historical dataset, and its historical identifier is called the most recent historical identifier 6. In step 200, the computing unit 2 reads the most recent historical identifier from the storage device 5.

[0077] In step 220, the computing unit 2 determines the latest history first input value for the key derivation function based on the latest history identifier 6. For example, the history identifier of the history dataset may be the same as the history first input value. Alternatively, the history identifier may each include the history first identifier and optionally at least one further history first identifier, similar to how the first identifier and at least one further first identifier were described above. The latest history first input value is obtained from the history first identifier and optionally at least one further history first identifier of the latest history identifier 6, similar to how the first input value was described above.

[0078] In step 240, the computing unit 2 generates a hash value 8 based on the first input value using a predetermined hash function, and in step 260, the computing unit 2 generates a further hash value 7 based on the latest history first input value using the hash function.

[0079] In step 260, the computing unit 2 checks whether the hash value 8 matches the further hash value 7. If this is true, steps 120 to 180 are performed as described above. Otherwise, in step 280, the computing unit 2 stores a further history dataset on the storage device 5, which includes either a first input value and the production period associated with the first input value, or a first identifier and the production period associated with the first identifier. The further history dataset then becomes the latest history dataset.

[0080] This makes it possible to identify changes in hardware or software components that result in different first input values. The communication interface lock may then be released, and an error message or warning message may be issued, for example. Steps 100 and 200 to 260 may then be repeated. When hash value 8 matches additional hash value 7, steps 120 to 180 may be performed as described above.

[0081] Figure 3 shows a schematic flowchart of an exemplary embodiment of the method according to the invention for unlocking the communication interface of electronic device 1 that has been locked by the method according to the invention described in Figures 1 and 2.

[0082] In step 300, a further computing unit 9, distinct from computing unit 2, obtains the device identifier 10 of electronic device 1, which corresponds to a second identifier. In step 320, the further computing unit 9 determines the production period of electronic device 1 based on the device identifier 10. In step 340, the further computing unit 9 selects one of the historical datasets containing the production period of electronic device 1. Based on the historical identification information of the selected historical dataset, the further computing unit 9 generates a historical first input value for the key derivation function, and based on the device identifier 10, generates a current second input value for the key derivation function, which is similar to what was described above regarding the first and second input values.

[0083] In step 360, the further computing unit 9 uses a key derivation function to reconstruct key 11 based on the history first input value and the current second input value. In step 380, the communication interface is unlocked using the reconstructed key 11.

[0084] As described, and with particular reference to the drawings, the invention enables secure access protection for communication interfaces of electronic devices for powered vehicles. In particular, component-specific keys are generated, which do not need to be stored and can be reconstructed as needed.

Claims

1. A method for locking the communication interface of an electronic device (1) for a powered vehicle, - A first identifier (3) is determined that characterizes the hardware component of the computing unit (2) of the production line in which the electronic device (1) was produced, or characterizes the software component of the computing unit (2). - A second identifier (4) characterizing the electronic device (1) is obtained, - Based on the first identifier (3), a first input value for a predetermined key derivation function is generated by the computing unit (2), and based on the second identifier (4), a second input value for the key derivation function is generated. - A key is generated by the computing unit (2) based on the first input value and the second input value using the key derivation function, - The communication interface is locked using the key. method.

2. The method according to claim 1, wherein the electronic device (1) is at least partially programmed and / or tested by the computing unit (2) before the determination of the first identifier (3), and / or software installation of the electronic device is performed by the computing unit (2), and / or troubleshooting of the electronic device (1) is performed by the computing unit (2).

3. The method according to any one of the preceding claims, wherein the communication interface is a troubleshooting interface for the electronic device (1).

4. The method according to any one of the preceding claims, wherein the second identifier (4) is determined based on the serial number of the electronic device (1).

5. The method according to any one of the preceding claims, wherein the first identifier is determined based on the serial number of the hardware component of the computing unit (2) and / or based on the serial number of the software component of the computing unit (2).

6. The method according to any one of the preceding claims, wherein the software component is the operating system of the computing unit (2) or the firmware of the computing unit (2), and / or the hardware component is the main circuit board of the computing unit (2) or the data memory of the computing unit (2).

7. - Further first identifiers are determined that characterize further hardware components or further software components of the computing unit (2). - The first input value is generated based on the first identifier and the further first identifier, The method according to any one of the preceding claims.

8. The method according to any one of the preceding claims, wherein the key is generated with a bit length of at least 32 bits or at least 64 bits.

9. The method according to any one of the preceding claims, wherein the electronic device is a sensor for the powered vehicle or an electronic control unit for the powered vehicle.

10. - At least one historical dataset is provided to the storage device (5), and each historical dataset of the at least one historical dataset includes corresponding historical identification information for the hardware component or software component of the computing unit (2) and for the production period associated with the historical identification information. - The latest history identification information (6) of the latest history dataset of at least one history dataset is read from the storage device (5), and the latest history identification information (6) is associated with the latest production period. - Based on the aforementioned latest history identification information, the latest history first input value is determined. - A hash value (8) based on the first input value is generated using a predetermined hash function. - Using the hash function, a further hash value (7) is generated based on the latest history first input value (6). - If the hash value (8) does not match the further hash value (7), a further history dataset is stored in the storage device (5), and the further history dataset includes the first input value and the production period associated with the first input value, or includes the first identifier and the production period associated with the first identifier. The method according to any one of the preceding claims.

11. Each of the aforementioned at least one historical datasets has the following historical identification information: - Each of the first history input values ​​for the key derivation function, or - Each history first identifier, The method according to claim 10, including the method described in claim 10.

12. A method for unlocking a communication interface of an electronic device (1) for a powered vehicle that has been locked by the method described in any one of claims 1 to 9, - At least one historical dataset is provided to the storage device (5), and each historical dataset of the at least one historical dataset includes corresponding historical identification information and a production period associated with the historical identification information. - A device identifier (10) that characterizes the electronic device (1) is determined, - The production period of the electronic device (1) is determined based on the device identifier (10), - One of the historical datasets is selected based on the production period of the electronic device (1), - Based on the history identification information of the selected history dataset, a first history input value for the key derivation function is generated. - Based on the device identifier (10), the current second input value for the key derivation function is generated. - The key (11) is reconstructed using the key derivation function based on the history first input value and the current second input value. - The communication interface is unlocked using the reconstructed key (11). method.

13. A data processing device having a computing unit (2) configured to perform the method according to any one of claims 1 to 11.

14. A data processing device having a further computing unit (9) configured to perform the method according to claim 12.

15. A computer program product having a command, wherein, when executed by a data processing device, the command causes the data processing device to execute the method according to any one of claims 1 to 12.

Images