Back to results
US 12,598,195 B2Granted
Frame invalidation in bus system via receive line
AssigneeRobert Bosch GmbH
InventorsMarcel Kneib, Oleg Schell
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for intercepting an intrusion into a bus system. The method includes detecting, by way of an intrusion detection system, a frame sent by a further node of the bus system on a bus of the bus system as an intrusion into the bus system; sending data on a receive line of a node device in order to manipulate a signal, which corresponds to the frame arriving over the bus, on the receive line, the receive line being arranged between a transceiver and a controller of the node device. A node device and a bus system for intercepting an intrusion into the bus system, are also described.
Claims17
A computer-implemented method for a bus system, comprising the following steps:
- obtaining, by a processor of an intrusion detection system of a first node and from a receive line of the first node, at least a portion of a frame sent by a second node of the bus system on a bus of the bus system, wherein the receive line branches at a branching point of the receive line into a first branch and a second branch downstream of the branching point, such that the first and second branches extend in parallel from a transceiver of the first node, with the first branch forming a line that extends from the transceiver directly to the processor of the intrusion detection system and the second branch forming a line that extends from the transceiver directly to a message processing controller of the first node, the at least the portion of the frame being received by the processor of the intrusion detection system of the first node over the first branch, the reception by the processor of the intrusion detection system thereby occurring in a manner that bypasses the message processing controller;
- detecting, by the processor of the intrusion detection system and based on the at least the obtained portion of the frame, an intrusion into the bus system;
- manipulating, by the processor of the intrusion detection system, a signal of the frame, of which the at least the portion had been obtained, the signal, as manipulated, being at a portion of the receive line that is upstream of the branching point on the receive line;
- and
- due to the manipulation, responding, by the message processing controller of the first node, to the frame, which is obtained by the message processing controller from the receive line, by:
- generating an error frame;
- and
- placing the generated error frame onto a transmit line that extends between the message processing controller and the transceiver of the first node for transmission of the error frame onto the bus.
5 more elements
A first node for a bus system, the first node comprising:
- a transceiver configured to be connected to a bus of the bus system;
- a message processing controller;
- a processor of an intrusion detection system of the first node;
- a receive line that branches at a branching point into a first branch and a second branch downstream of the branching point, such that the first and second branches extend in parallel from the transceiver, with the first branch forming a line that extends from the transceiver directly to the processor of the intrusion detection system and the second branch forming a line that extends from the transceiver directly to the message processing controller;
- and
- a transmit line that extends between the message processing controller and the transceiver;
- wherein:
- the first node is configured for the processor of the intrusion detection system to:
- obtain, from the first branch of the receive line of the first node, at least a portion of a frame sent by a second node of the bus system on the bus of the bus system, the at least the portion of the frame being received by the processor of the intrusion detection system of the first node over the first branch, the reception by the processor of the intrusion detection system thereby occurring in a manner that bypasses the message processing controller;
- detect, based on the at least the obtained portion of the frame, an intrusion into the bus system;
- and
- manipulate a signal of the frame, of which the at least the portion had been obtained, wherein the signal, as manipulated, is at a portion of the receive line that is upstream of the branching point of the receive line;
- and
- due to the manipulation, the message processing controller is configured to respond to the frame, which is obtained by the message processing controller from the receive line, by:
- generating an error frame;
- and
- placing the generated error frame onto the transmit line for transmission of the error frame onto the bus.
14 more elements
A bus system, comprising:
- a bus;
- a first node;
- and
- a second node;
- wherein:
- the first node includes:
- a transceiver connected to the bus of the bus system;
- a message processing controller;
- a processor of an intrusion detection system of the first node;
- a receive line that branches at a branching point into a first branch and a second branch downstream of the branching point, such that the first and second branches extend in parallel from the transceiver, with the first branch forming a line that extends from the transceiver directly to the processor of the intrusion detection system and the second branch forming a line that extends from the transceiver directly to the message processing controller;
- and
- a transmit line that extends between the message processing controller and the transceiver;
- the first node is configured for the processor of the intrusion detection system to:
- obtain, from the first branch of the receive line of the first node, at least a portion of a frame sent by the second node of the bus system on the bus of the bus system, the at least the portion of the frame being received by the processor of the intrusion detection system of the first node over the first branch, the reception by the processor of the intrusion detection system thereby occurring in a manner that bypasses the message processing controller;
- detect, based on the at least the obtained portion of the frame, an intrusion into the bus system;
- and
- manipulate a signal of the frame, of which the at least the portion had been obtained, wherein the signal, as manipulated, is at a portion of the receive line that is upstream of the branching point of the receive line;
- due to the manipulation, the message processing controller is configured to respond to the frame, which is obtained by the message processing controller from the receive line, by:
- generating an error frame;
- and
- placing the generated error frame onto the transmit line for transmission of the error frame onto the bus;
- and
- the second node also includes a further transceiver, a further message processing controller, and a further processor of a further intrusion detection system.
20 more elements
Dependencies are inferred from the claim text.