Motor vehicle comprising an internal data network and method for operating the motor vehicle

A motor vehicle comprising an in-vehicle data network that is subdivided into a first security zone and a second security zone, the in-vehicle data network comprising:

• a first control device assigned to the first security zone;
• a second control device assigned to the second security zone, each of the first and second control device configured to exchange messages with other coupled control devices;
• a domain controller configured to:
• logically separate the first and second security zones from each other by realizing the first and second security zones as a virtual local area network (VLAN) having a common data line;
• allow transmission of a message between the first and second security zones if the message fulfills a predetermined safety criterion, wherein the predetermined safety criterion is one of:
• a sender or an addressee of the message coincides with a respective predetermined control device specification, or a message type of the message coincides with a predetermined type specification, or a predetermined plausibility condition of the message is satisfied;
• and
• block the transmission of the message between the first and the second security zones if the message does not fulfill the predetermined safety criterion.

A method for operating an in-vehicle data network in a motor vehicle, wherein the in-vehicle data network is subdivided into a first security zone and a security zone, the method comprising:

• exchanging, by a first control device assigned to the first security zone, a message with the second control device;
• logically separating, by a domain controller, the first and second security zones from each other by realizing the first and second security zones as a virtual local area network (VLAN) having a common data line;
• wherein the exchanging further comprises allowing, by the domain controller, transmission of the message between the first and second security zones if the message fulfills a predetermined safety criterion, wherein the predetermined safety creiterion is one of:
• a sender or an addressee of the message coincides with a respective predetermined control device specification, or a message type of the message coincides with a predetermined type specification or a predetermined plausibility condition of the message is satisfied;
• and
• wherein the exchanging further comprises blocking, by the domain controller, the transmission of the message between the first and the second security zones if the message does not fulfill the predetermined safety criterion.