Apparatus for use in a can system
AssigneesSTMicroelectronics (Grenoble 2) SAS, Technological Educational Institute of Crete, Energica Motor Company S.p.A.
InventorsAntonio-Marcello Coppola, Georgios Kornaros, Giovanni Gherardi
Life of this patent
Estimating the term…
Abstract
A CAN device is provided with an encryption function and a decryption function. The encryption function allows messages to be encrypted and put onto a CAN bus. The decryption function allows the messages on the CAN bus to be decrypted. The encryption and decryption functions share keys which change over the course of time.
Claims24
An apparatus for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the apparatus comprising:
- encryption circuitry configured to:
- perform an encryption function, the encryption function providing an encryption output in dependence on a key, the key being shared with an other device in the system, wherein the key changes over time;
- and
- generate an encrypted CAN frame using the encryption output along with data to be output by the apparatus;
- and
- an output driver configured to cause the encrypted CAN frame to be output onto a CAN bus that is connected to the other device so that the other device can receive the encrypted CAN frame via the CAN bus.
An apparatus for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the apparatus comprising:
- an input buffer configured to receive an encrypted CAN frame from an other device in the system via a CAN bus;
- and
- decryption circuitry configured to perform an decryption function that provides a decryption output in dependence on a key, the key being shared with the other device in the system, wherein the key changes over time, the decryption output being used to decrypt the encrypted CAN frame to provide a decrypted output.
A method for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the system including a plurality of devices coupled to a CAN bus, the method comprising:
- providing, by a first device of the plurality of devices, an encryption output, the encryption output being dependent on a key, the key being shared between the plurality of devices in the system, wherein the key changes over time;
- generating, by the first device, an encrypted CAN frame, the encrypted CAN frame being dependent on the encryption output and data to be output onto the CAN bus;
- and
- outputting the encrypted CAN frame onto the CAN bus.
A method for use in a system operating in accordance with a Controller Area Network (CAN) protocol, the system including a plurality of devices coupled to a CAN bus, the method comprising:
- receiving, by a second device of the plurality of devices, an encrypted CAN frame output from a first device via the CAN bus;
- providing, by the second device, a decryption output, the decryption output being dependent on a key, the key being shared by the plurality of devices, wherein the key changes over time;
- and
- using, by the second device, the decryption output to decrypt the encrypted CAN frame to provide a decrypted output.
Dependencies are inferred from the claim text.