Apparatus for use in a can system
AssigneesSTMicroelectronics (Grenoble 2) SAS, Technological Educational Institute of Crete, Energica Motor Company S.p.A.
InventorsAntonio-Marcello Coppola, Georgios Kornaros, Giovanni Gherardi
Life of this patent
Estimating the term…
Abstract
A CAN device is provided with an encryption function and a decryption function. The encryption function allows messages to be encrypted and put onto a CAN bus. The decryption function allows the messages on the CAN bus to be decrypted. The encryption and decryption functions share keys which change over the course of time.
Claims21
An device for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the device comprising:
- encryption circuitry configured to:
- perform an encryption function, the encryption function providing an encryption output in dependence on a key, the key being shared with an other device in the system, wherein the key changes over time in response to one of a reset frame, a synchronization frame, or expiry of a predetermined period of time;
- and
- generate an encrypted CAN frame using the encryption output along with data to be output by the device;
- and
- an output driver configured to cause the encrypted CAN frame to be output onto a CAN bus that is connected to the other device so that the other device can receive the encrypted CAN frame via the CAN bus.
An device for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the device comprising:
- encryption circuitry configured to:
- perform an encryption function, the encryption function providing an encryption output in dependence on a key, the key being shared with an other device in the system and changing over time;
- and
- generate an encrypted CAN frame using the encryption output along with data to be output by the device, the encrypted CAN frame including encrypted CAN identity data and encrypted CAN payload data;
- and
- an output driver configured to cause the encrypted CAN frame to be output onto a CAN bus that is connected to the other device so that the other device can receive the encrypted CAN frame via the CAN bus.
A device for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the device comprising:
- a secured memory storing a seed and a key that are also stored in another device in the system;
- a counter configured to provide a count value selected among an initial count value based on the seed and later count values determined in response to a count signal;
- encryption circuitry configured to:
- perform a coding function to scramble a part of data to be output wherein the coding function is configured to receive the count value from the counter to control the scrambling;
- perform an encryption function, the encryption function providing an encryption output in dependence on the count value and the key;
- generate an encrypted CAN frame using the encryption output along with the data to be output by the device;
- and
- an output driver configured to cause the encrypted CAN frame to be output onto a CAN bus that is connected to the other device so that the other device can receive the encrypted CAN frame via the CAN bus.
Dependencies are inferred from the claim text.