Dual Control Sensor Unit Validation for Tachograph Manipulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle sensor units lack manipulation-proof and fail-safe operation, and tachograph systems are not adequately protected against manipulation and failure, while also being costly and complex to produce.
Innovation Solution
A method for operational validation of a vehicle sensor unit involving a sensor element, communication interface, and dual control devices, where one control device stores program code and configuration data, and validation signals are used to ensure consistency and security, with encryption and cyclic redundancy checks to prevent manipulation and errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dual control devices with validation signals are implemented, then manipulation-proof operation is improved, but device complexity increases
Solution Approach 1:
The control system is segmented into two independent control devices (first control device and second control device), each with its own memory and validation capabilities. This segmentation allows independent verification of program code and configuration data, preventing manipulation while distributing system functions across multiple components.
Solution Approach 2:
A validation signal is generated by the first control device based on program code and configuration data, then fed back to the second control device for verification. This feedback mechanism ensures that any manipulation or corruption of critical data is detected, maintaining system reliability through continuous self-validation.
2Measurement precision
If validation signals and checksums are calculated and compared, then detection precision of manipulation is improved, but computing effort increases
Solution Approach 1:
The validation mechanism extracts only the essential verification elements (validation signals derived from program code and configuration data) from the complete system state. By comparing these extracted validation signals rather than entire datasets, the system achieves high manipulation detection accuracy with reduced computing effort.
Solution Approach 2:
The system transforms program code and configuration data into condensed validation parameters (checksums or hash values). This parameter transformation maintains the ability to detect manipulation while significantly reducing the computational resources required for comparison and validation.
3Reliability
If program code and configuration data are validated cyclically, then reliability is improved, but loss of time occurs
Solution Approach 1:
The validation process is implemented as a periodic cyclic operation where the first control device regularly generates validation signals and the second control device verifies them. This periodic validation ensures continuous operational safety while allowing normal system operation between validation cycles, minimizing time loss.
Data Source
Figure 1~2b
AI summary
A method for the operational validation of a sensor unit (1) for a vehicle is described. The sensor unit (1) comprises a sensor element (3), a communication interface (4a), a first control device (5), and a second control device (7). The first control device (5) includes a memory in which program code for operating the sensor unit (1) is stored. The second control device (7) includes a memory in which a copy of the program code is stored. In this method, a measurement signal is acquired by the sensor element (3). A validation signal is determined by each of the control devices (5, 7). At least one of the validation signals is provided to the other control device (5, 7), and a validation parameter is determined by each control device (5, 7) based on the validation signals.Depending on the validation parameter and the measurement signal, a sensor signal is determined by the first control device (5) and/or by the second control device (7), which is provided via the communication interface (4a) of the sensor unit (1). A tachograph system (11) is also specified.