Method for transmitting data among components of the system electronics of mobile systems, and such components

#The present invention is directed to a method for transmitting data among components of the system electronics of mobile systems, as well as to system electronics components of this kind, such as sensors, control units, or actuators, having a device for transmitting and/or receiving data. The present invention is also directed to a computer program and a computer program product, each having a program code element for implementing the method according to the present invention.

#Electronic control or regulation has established its importance in many areas of the system electronics of mobile systems, e.g., in motor vehicles or aircraft. In this context, both digital data exchange (e.g., bus systems), as well as analog signal transmission take place among the components of the system electronics. While appropriate protective measures substantially limit any possible manipulation of participating control units, in principle, signal-transmission, i.e., data-transmission paths can only be protected with great difficulty. In other words, the transmitted information can be manipulated relatively easily.

#The need exists, therefore, to not only safeguard the units themselves from an unauthorized external access, but also to protect the data transmission to and from these units from external manipulation attempts. This applies both to the automotive sector (e.g., protection from engine tuning), but to an even greater degree to aircraft. In the automotive sector, it is particularly useful to safeguard the transmission path from the sensors to the control unit and from the control unit to the actuators, the data to be transmitted being available in analog or also in digital form, and in addition to unidirectional data transmission, in particular in the context of control systems, bidirectional data transmission being used as well.

#The FIGURE schematically depicts two system electronics components, each having devices for transmitting data, as well as devices for encrypting and/or decrypting data in accordance with the present invention.

#The FIGURE shows two components of the system electronics of a motor vehicle, selected by way of example, namely a sensor 1 and a control unit 2. The input line to sensor 1 is denoted by 5. Input lines 7 lead to the control unit; output lines 8 lead away from the control unit to other components of the system electronics, such as actuators. Typically, the data transmission between sensor 1 and control unit 2 takes place via an interface 6 (analog, PWM, bus . . . ). Sensor 1 has an encryption device 3; control unit 2 a decryption device 4.

#Sensor 1 ascertains values, such as pressure, temperature, speed, charging pressure, etc. which generally represent physical quantities or which are derived therefrom. These sensor values are no longer represented, as in known methods heretofore, in the form of an analog electric signal (e.g., a voltage level) or a simple (open) digital message (such as a bus message, for example for a CAN), but rather, in accordance with the present invention, by an encrypted message. For this purpose, device 3 of sensor 1 undertakes an encryption of the sensor data, before they are sent via interface 6 to control unit 2. In the process, encryption methods may be employed, as are used in the area of electronic data processing in the context of networked computer structures (such as the Internet), (for example, RSA methods, asymmetrical encryption methods).

#The encrypted message is made available via interface 6 to control unit 2, which, in a first step, undertakes the decryption of the message. Decryption device 4 is provided for this purpose. In this operation, control unit 2 recognizes whether the message was uncorrupted and if it was transmitted by the authorized transmitter. For this purpose, besides the actual encryption of the message, it may also be signed. Upon positive examination of the message by decryption device 4 in control unit 2, the decrypted data are further processed accordingly. For example, on the basis of this data, an actuator is driven by control unit 2 via an output line 8. If, on the other hand, the examination of the transmitted data in decryption device 4 has a negative result, control unit 2 may react in suitable fashion in that, for example, a reliable replacement value is selected which maintains a reliable operation, and in that, for example, the driver of the vehicle is informed accordingly.