# US 2021/0342249 A1 · Method for detecting safety-relevant data streams

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0342249 A1
- Document ID: US20210342249A1
- Status: Published application
- Kind: A1
- Application number: 17/284,359
- Filed: 2019-10-10
- Published: 2021-11-04
- Earliest claimed: 2018-10-11
- Assignees: AVL List GmbH
- Applicants: Avl List GmbH
- Inventors: Peter PRILLER
- Web page: https://patentgrep.com/patent/US20210342249A1

## CPC

- G06F 9/455: Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities}
- G06F 9/45558: {Hypervisor-specific management and integration aspects}
- G06F 11/3457: {Performance evaluation by simulation}
- G06F 21/565: {by checking file integrity}
- G06F 11/3684: {for test design, e.g. generating new test cases}
- G06F 11/3688: {for test execution, e.g. scheduling of test suites}
- G06F 2009/45575: {Starting, stopping, suspending or resuming virtual machine instances}
- G06F 2009/45587: {Isolation or security of virtual machine instances}
- G06F 2009/45591: {Monitoring or debugging support}
- G06F 2221/034: Test or assess a computer or a system
- G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Various embodiments of the present disclosure are directed to method for detecting safety-relevant data streams which occur in a hardware system during the execution of at least one data processing task. In one example embodiment, the method includes the steps of: defining critical data via an interface, mapping of the hardware system onto a simulation model capable of running in a simulation environment; executing the at least one data processing task as a simulation with the simulation model in the simulation environment, monitoring the creation, transmission and deletion of the critical data and instances of the critical data in the simulation model during the execution of the at least one data processing task, and identifying and logging the security-relevant data streams.

## Claims

### Claim 1

Method for detecting safety-relevant data streams which occur in a hardware system during the execution of at least one data processing task, the method including the following steps:
defining critical data, which may be stored in at least one storage unit of the hardware system and/or transferred to the hardware system via an interface,
mapping of the hardware system onto a simulation model capable of running in a simulation environment,
executing the at least one data processing task as a simulation with the simulation model in the simulation environment,
monitoring the creation, transmission and deletion of the critical data and instances of the critical data in the simulation model during the execution of the at least one data processing task, and
identifying and logging the security-relevant data streams.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the step of mapping the hardware system onto a simulation model includes dividing a variety of hardware components which are connected to one another via at least one communication device and configured and arranged to exchange data via this communication device;
wherein each of the hardware components has at least one communication unit, at least one storage unit and at least one processor unit.

### Claim 3 (depends on 1)

The method according to claim 1, characterized in that the critical data is defined by defining data properties.

### Claim 4 (depends on 1)

The method according to claim 1, further including creating a warning message when at least certain security-relevant data streams are identified.

### Claim 5 (depends on 1)

The method according to claim 1, characterized in that the detected safety-relevant data streams are stored in an evaluation.

### Claim 6 (depends on 5)

The method according to claim 5, characterized in that the evaluation is displayed graphically.

### Claim 7 (depends on 1)

The method according to claim 1, characterized in that the course of the simulation is logged.

### Claim 8 (depends on 1)

The method according to claim 1, characterized in that the at least one data processing task results from the execution of application software, which is operated, if applicable, while processing defined test cases.

### Claim 9 (depends on 1)

The method according to claim 1, further including the step of dividing portions of the hardware system into a permitted domain and a prohibited domain.

### Claim 10 (depends on 9)

The method according to claim 9, characterized in that at least the following data streams are identified as security-relevant data streams:
transmission of a critical datum or instances thereof via a communication device of the prohibited domain,
deletion of a critical datum while an instance of the critical datum continues to exist,
creation of an instance of a critical datum in the prohibited domain,
continued existence of a critical datum after a certain point in time and/or system status.

### Claim 11 (depends on 10)

The method of claim 10, wherein the continued existence of the critical datum after a critical point in time and/or system status is after completion of the at least one data processing task.