Back to results
US 12,754,874 B2Granted
Controller area network (CAN) bus system using CANsec security protocol
AssigneeRobert Bosch GmbH
InventorsArthur Mutter, Friedrich Wiemer, Ramona Jung, Thomas Enderle
Life of this patent
Estimating the term…
Abstract
A method for processing data associated with a serial bus system. The method includes: providing an indication characterizing at least one aspect of a control plane for a security protocol for the serial bus system, transmitting the indication on the bus system.
Claims18
A computer-implemented method for processing data associated with a serial bus system, the method comprising:
- determining, by a first node of the serial bus system, which one of a plurality of control-plane types for a security protocol for the serial bus system is to be used, the plurality of control-plane types including at least control planes that differ with respect to cryptographic key handling;
- based on the determination, providing, by the first node, at least a part of a first information element in a header of the security protocol, the at least the part of the first information element having a value that indicates the determined control-plane type and that signals, to at least one further node of the serial bus system, which one of the plurality of control-plane types is to be used for the security protocol;
- and
- transmitting, by the first node and on the serial bus system, a frame including the header and the first information element to the at least one further node, the at least one further node being configured to perform control plane processing according to the value of the at least the part of the first information element included in the transmitted frame.
1 more element
A computer-implemented method for processing data associated with a serial bus system, the method comprising:
- receiving, by a first node of the serial bus system, over the serial bus system, and from a second node of the serial bus system, a frame including a header of a security protocol for the serial bus system and at least a part of a first information element in the header, wherein the at least the part of the first information element has a value that indicates which one of a plurality of control-plane types for the security protocol is to be used, the plurality of control-plane types including at least control planes that differ with respect to cryptographic key handling;
- and
- based on the reception, performing, by the first node, control plane processing dictated by the value of the at least the part of the first information element included in the received frame.
An apparatus configured to process data associated with a serial bus system, the apparatus configured to:
- determine which one of a plurality of control-plane types for a security protocol for the serial bus system is to be used, the plurality of control-plane types including at least control planes that differ with respect to cryptographic key handling;
- based on the determination, provide at least a part of a first information element in a header of the security protocol, the at least the part of the first information element having a value that indicates the determined control-plane type and that signals, to at least one further node of the serial bus system, which one of the plurality of control-plane types is to be used for the security protocol;
- and
- transmit, on the serial bus system, a frame including the header and the first information element to a node of the serial bus system, the node being configured to perform control plane processing according to the value of the at least the part of the first information element included in the transmitted frame.
1 more element
A serial bus system, comprising at least one apparatus configured to process data associated with a serial bus system, the apparatus configured to:
- determine which one of a plurality of control-plane types for a security protocol for the serial bus system is to be used, the plurality of control-plane types including at least control planes that differ with respect to cryptographic key handling;
- based on the determination, provide at least a part of a first information element in a header of the security protocol, the at least the part of the first information element having a value that indicates the determined control-plane type and that signals, to at least one further node of the serial bus system, which one of the plurality of control-plane types is to be used for the security protocol;
- and
- transmit, on the serial bus system, a frame including the header and the first information element to a node of the serial bus system, the node being configured to perform control plane processing according to the value of the at least the part of the first information element included in the transmitted frame.
1 more element
A non-transitory computer-readable storage medium on which are stored instructions for processing data associated with a serial bus system, the instructions, when executed by a computer, causing the computer to perform the following steps:
- determining which one of a plurality of control-plane types for a security protocol for the serial bus system is to be used, the plurality of control-plane types including at least control planes that differ with respect to cryptographic key handling;
- based on the determination, providing at least a part of a first information element in a header of the security protocol, the at least the part of the first information element having a value that indicates the determined control-plane type and that signals, to at least one further node of the serial bus system, which one of the plurality of control-plane types is to be used for the security protocol;
- and
- transmitting, on the serial bus system, a frame including the header and the first information element to a node of the serial bus system, the node being configured to perform control plane processing according to the value of the at least the part of the first information element included in the transmitted frame.
1 more element
Dependencies are inferred from the claim text.