CAN Frame Identifier Formatting for Unified Cryptographic Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data processing methods for data frames in bus systems, particularly in CAN FD and CAN XL protocols, face challenges in efficiently handling different identifier lengths and security protocols, leading to complexity in cryptographic functions and integrity checks.
Innovation Solution
A method and device for processing data frames that utilize a bit vector structure with flexible formatting, including 11-bit and 29-bit identification elements, filler data, and security protocol information, allowing for efficient processing and alignment of data elements, and optional checksum truncation for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data frames with different identifier lengths (11-bit and 29-bit) are processed using separate cryptographic functions, then compatibility with existing CAN FD protocols is maintained, but device complexity and processing overhead increase
Solution Approach 1:
The patent implements a universal cryptographic processing device that can handle both 11-bit and 29-bit identifier formats through a single unified function. The device receives data frames with either identifier type and processes them through the same cryptographic operations (authentication, integrity checks), eliminating the need for separate cryptographic paths and reducing overall device complexity while maintaining full compatibility with different CAN FD frame formats
Solution Approach 2:
The patent changes the parameter being processed within the unified cryptographic function - specifically, the identifier length parameter varies (11 bits or 29 bits) but the cryptographic processing remains the same. The device adapts to different identifier lengths by adjusting the input parameters to the cryptographic function rather than requiring different functions, thereby simplifying the device architecture
2Reliability
If complete checksums are processed for all data frames, then integrity verification accuracy is maximized, but processing time and computational resources increase
Solution Approach 1:
The patent applies partial action by processing only the necessary portion of the checksum rather than the complete checksum for all data frames. The cryptographic device performs integrity verification on relevant data elements and can truncate or skip processing of certain checksum portions when full verification is not required, thereby reducing processing time while maintaining adequate integrity verification accuracy for the critical portions of the data
Data Source
AI summary
A method for processing data associated with a data frame. The method includes: providing output data with a plurality of information elements, for example in the form of a bit vector, for example for a device for executing cryptographic functions, wherein a first information element of the plurality of information elements has a length of 11 bits and characterizes first identification information associated with a data frame, wherein a second information element of the plurality of information elements has a length of 18 bits and is designed to characterize optional second identification information associated with the data frame, and, optionally, using the output data.