# US 11,909,726 B2 · Method for controlling a vehicle > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,909,726 B2 - Document ID: US11909726B2 - Status: Granted - Kind: B2 - Application number: 17/595,775 - Filed: 2020-04-28 - Published: 2022-07-14 - Granted: 2024-02-20 - Earliest claimed: 2019-05-27 - Assignees: Robert Bosch GmbH - Applicants: Robert Bosch GmbH - Inventors: Soheil Gherekhloo; Jan-Felix Van Dam; Ralf Prenzel - Web page: https://patentgrep.com/patent/US11909726B2 ## CPC - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 9/0822: {using key encryption key} - H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)} - H04W 4/46: for vehicle-to-vehicle communication [V2V] - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for applying control to a vehicle. The method includes: receiving, by way of a second control unit of a second vehicle to which control is to be applied, a signal encompassing a message encrypted using a valid symmetrical key of a first control unit of a first vehicle; ascertaining, by way of the second control unit, a decryptability of the encrypted message using a valid symmetrical key of the second control unit or a symmetrical reserve key of the second control unit ascertained by way of the second control unit; ecrypting the encrypted message, depending on the ascertained decryptability, by way of the second control unit using the valid symmetrical key of the second control unit or the symmetrical reserve key of the second control unit; and applying control, based on the decrypted message, to the second vehicle to which control is to be applied. ## Claims ### Claim 1 A method for applying control to a vehicle, comprising the following steps: receiving, using a second control unit of a second vehicle to which control is to be applied, a signal encompassing a message encrypted using a valid symmetrical key of a first control unit of a first vehicle; ascertaining, using the second control unit, a decryptability of the encrypted message using: (i) a valid symmetrical key of the second control unit or (ii) a symmetrical reserve key of the second control unit ascertained using the second control unit, wherein the ascertaining includes: determining whether the encrypted message is decryptable using the valid symmetrical key, and in case that the encrypted message is not decryptable using the valid symmetrical key, determining that the encrypted message is decryptable by the symmetrical reserve key; decrypting the encrypted message, depending on the ascertained decryptability, using the second control unit, using (i) the valid symmetrical key of the second control unit or (ii) the symmetrical reserve key of the second control unit; and applying control, based on the decrypted message, to the second vehicle to which control is to be applied. ### Claim 2 (depends on 1) The method as recited in claim 1, further comprising: ascertaining, using the second control unit, the symmetrical reserve key of the second control unit using a key generation method and the valid symmetrical key of the second control unit. ### Claim 3 (depends on 2) The method as recited in claim 2, further comprising: ascertaining, using the first control unit, a symmetrical reserve key of the first control unit using the same key generation method and the valid symmetrical key of the first control unit, to replace the valid symmetrical key of the first control unit with the ascertained symmetrical reserve key. ### Claim 4 (depends on 2) The method as recited in claim 2, further comprising: transferring an encrypted information item regarding the key generation method between the first and second vehicles to make it possible to ascertain identical symmetrical keys using the first and second control units. ### Claim 5 (depends on 1) The method as recited in claim 1, further comprising: replacing the valid symmetrical key of the first and/or the second control unit with the symmetrical reserve key ascertained using the first and/or second control unit. ### Claim 6 (depends on 5) The method as recited in claim 5, wherein the replacing of the valid symmetrical key by the ascertained symmetrical reserve key depends on: (i) the ascertained decryptability of the encrypted message, and/or (ii) a vehicle information item or a driving information item of the first and/or second vehicle. ### Claim 7 (depends on 1) The method as recited in claim 1, further comprising: emitting, using the first and/or second control unit, a signal encompassing a message encrypted using the valid symmetrical key of the first and/or second control unit in order to apply control, based on the message, to the second vehicle. ### Claim 8 (depends on 1) The method as recited in claim 1, wherein in the step of applying control, control is applied to one of the following units of the second vehicle: propulsion unit, braking unit, steering unit, communication unit, display unit. ### Claim 9 A non-transitory machine-readable storage medium on which is stored a computer program for applying control to a vehicle, the computer program, when executed by a computer, causing the computer to perform or control the following steps: receiving, using a second control unit of a second vehicle to which control is to be applied, a signal encompassing a message encrypted using a valid symmetrical key of a first control unit of a first vehicle; ascertaining, using the second control unit, a decryptability of the encrypted message using: (i) a valid symmetrical key of the second control unit or (ii) a symmetrical reserve key of the second control unit ascertained using the second control unit, wherein the ascertaining includes: determining whether the encrypted message is decryptable using the valid symmetrical key, and in case that the encrypted message is not decryptable using the valid symmetrical key, determining that the encrypted message is decryptable by the symmetrical reserve key; decrypting the encrypted message, depending on the ascertained decryptability, using the second control unit, using (i) the valid symmetrical key of the second control unit or (ii) the symmetrical reserve key of the second control unit; and applying control, based on the decrypted message, to the second vehicle to which control is to be applied. ### Claim 10 A control unit configured to apply control to a vehicle, the control unit configured to which unit is configured to: receive a signal encompassing a message encrypted using a valid symmetrical key of a first control unit of a first vehicle; ascertain a decryptability of the encrypted message using: (i) a valid symmetrical key of the control unit, or (ii) a symmetrical reserve key of the control unit ascertained using the control unit, wherein in order to ascertain the decryptability of the encrypted message, the control unit is configured to: determine whether the encrypted message is decryptable using the valid symmetrical key, and in case that the encrypted message is not decryptable using the valid symmetrical key, determine that the encrypted message is decryptable by the symmetrical reserve key; decrypt the encrypted message, depending on the ascertained decryptability, using: (i) the valid symmetrical key of the control unit, or (ii) the symmetrical reserve key of the control unit; and apply control, based on the decrypted message, to a second vehicle to which control is to be applied. ### Claim 11 A grouping of control units, comprising: at least one first control unit disposed in a first vehicle; and a second control unit disposed in a second vehicle; wherein each respective control unit of the first and second control units is configured to: receive a signal encompassing a message encrypted using a valid symmetrical key of a respective other one of the first and second control unit; ascertain a decryptability of the encrypted message using: (i) a valid symmetrical key of the respective control unit, or (ii) a symmetrical reserve key of the control unit ascertained using the respective control unit, wherein in order to ascertain the decryptability of the encrypted message, each respective control unit is configured to: determine whether the encrypted message is decryptable using the valid symmetrical key, and in case that the encrypted message is not decryptable using the valid symmetrical key, determine that the encrypted message is decryptable by the symmetrical reserve key; decrypt the encrypted message, depending on the ascertained decryptability, using: (i) the valid symmetrical key of the respective control unit, or (ii) the symmetrical reserve key of the respective control unit; and apply control, based on the decrypted message, to a respective one of the first and second vehicles within which the respective control unit is disposed.