Connecting node for a communications network

• US 10,044,564 B2
• Filed: 04/25/2012
• Issued: 08/07/2018
• Est. Priority Date: 06/10/2011
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Likkei, Juergen
• Primary Examiner(s): Lai, Andrew
• Assistant Examiner(s): Andrews, III, Hoyet H
• Application Number:
  US14/125,235
• Publication Number:
  US 20140185463A1
• Time in Patent Office: 2,295 Days
• Field of Search: 370250, 370254
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 12/46 Interconnection of networks
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 49/15 Interconnection of switching modules

Abstract

A connecting node for a communications network is described, especially for connection of a network element of the communications network to the communications network, wherein the connecting node has a first interface for connection of the network element to the connecting node and a second interface for connection of the connecting node to the communications network, wherein the connecting node is constructed to enable an exchange of data between the communications network and the network element via the first and second interface, and wherein the connecting node is constructed to read and/or to alter and/or to block data exchanged between the communications network and the network element.

Claims

1. A connecting node for a communications network and for connection of a network element of the communications network to the communications network, the connecting node comprising:

a first interface for connection of the network element to the connecting node;

a second interface for connection of the connecting node to the communications network, wherein the connecting node is constructed to enable an exchange of data between the communications network and the network element via the first and second interfaces, and wherein the connecting node is constructed to at least one of read, alter, and block data exchanged between the communications network and the network element;

a circuit element comprising a memory; and

a data path for communicatively coupling the first interface and the second interface, wherein;

the network element is a control unit connected to other control units via the communications network,

the circuit element is connected to the data path by data lines,

the circuit element is configured to read additional information accompanying the data exchanged at the interfaces with the aid of the data lines and to continuously compare the additional information with presets stored in the memory,

the additional information includes at least one of a Controller Area Network (CAN) ID, an Ethernet address, and an Internet Protocol (IP) address, and

the circuit element is configured to alter data with the aid of the data lines and depending on the comparison.

2. The connecting node as recited in claim 1, further comprising:

a third interface for connection to a control unit.

3. The connecting node as recited in claim 2, wherein the connecting node is constructed to receive control commands from the control unit via the communications network without being received via the third interface or in addition to the third interface.

4. The connecting node as recited in claim 2, further comprising:

at least one data line via which the circuit element is connected to the data path.

5. The connecting node as recited in claim 2, further comprising:

a control line via which the third interface communicates with the circuit element.

6. The connecting node as recited in claim 1, wherein the connecting node is constructed to at least one of read, alter, and block data of at least one of an Open Systems Interconnection (OSI) 2 layer, an open systems interconnection, an OSI 3 layer, and an OSI 7 layer.

7. The connecting node as recited in claim 1, wherein the connecting node is constructed to perform at least one of the following functions:

reading and evaluating the additional information that is exchanged along with the exchanged data;

at least one of ascertaining, assessing, and altering a communications structure describing the exchange of data, including a direction of a data flow in relation to the network element;

ascertaining at least one of a status and a behavior of the network element in relation to the data exchanged with the communications network;

comparing at least one of the exchanged data, the status of the network element, and the behavior of the network element with at least one of predefined data, a predefined status, and a predefined behavior, respectively;

assessing at least one of the exchanged data, the status of the network element, and the behavior of the network element;

at least one of altering and blocking data, including data deviating from a preset;

supplementing data sent from the network element and having a signature;

checking the signature of data received via the communications network; and

forwarding the received data to the network element after the signature has been recognized as correct.

8. The connecting node as recited in claim 7, wherein the signature includes an Keyed-Hash Method Authentication Code (HMAC) method involving a keyed-hash message authentication code.

9. The connecting node as recited in claim 1, wherein the connecting node is constructed to log one of data that has been read and information derived therefrom.

10. The connecting node as recited in claim 1, wherein the connecting node is disposed one of in a wiring harness of the communications network and in a plug connector of the wiring harness of the communications network.

11. The connecting node as recited in claim 1, wherein:

the circuit element includes a memory that stores at least one preset,

the circuit element compares data on the data path with the at least one preset, and

the data is altered on the basis of the comparison.

12. The connecting node as recited in claim 1, wherein the circuit element is in the form of an application-specific integrated circuit (ASIC).

13. The connecting node as recited in claim 1, further comprising:

a first switch for opening and closing the data path; and

a second switch for opening and closing the data path.

14. The connecting node as recited in claim 13, wherein data is capable of being exchanged between the first interface and the second interface only when the first switch and the second switch are closed.

15. The connecting node as recited in claim 13, wherein the circuit element controls whether the first switch is opened or closed, and whether the second switch is opened or closed.

16. A control device for a communications network, comprising:

circuit for at least one of communicating with at least one connecting node and controlling the at least one connecting node, wherein the connecting node is for a communications network and for connection of a network element of the communications network to the communications network, the at least one connecting node comprising;

a first interface for connection of the network element to the connecting node;

a second interface for connection of the connecting node to the communications network, wherein the connecting node is constructed to enable an exchange of data between the communications network and the network element via the first and second interfaces, and wherein the connecting node is constructed to at least one of read, alter, and block data exchanged between the communications network and the network element;

a circuit element comprising a memory; and

a data path for communicatively coupling the first interface and the second interface, wherein;

the network element is a control unit connected to other control units via the communications network,

the circuit element is connected to the data path by data lines, the circuit element is configured to read additional information accompanying the data exchanged at the interfaces with the aid of the data lines

and to continuously compare the additional information with presets stored in the memory,

the additional information includes at least one of a Controller Area Network (CAN) ID, an Ethernet address, and an Internet Protocol (IP) address, and

the circuit element is configured to alter data with the aid of the data lines and depending on the comparison.

17. The control unit as recited in claim 16, wherein the control unit is constructed to perform the communication with the at least one connecting node at least partially at least one of in an encrypted manner and with the aid of a signature.

18. The control unit as recited in claim 16, wherein the control unit is constructed one of (1) to control the at least one connecting node at least one of via a channel that is separate from the communications network and via the communications network and (2) to communicate with the at least one connecting node via the channel and the communications network.

19. A communications network, comprising:

circuit for connecting at least two network elements to each other, wherein at least one of the network elements is connected to the communications network via a connecting node, the connecting node comprising;

a first interface for connection of the network element to the connecting node;

a second interface for connection of the connecting node to the communications network, wherein the connecting node is constructed to enable an exchange of data between the communications network and the network element via the first and second interfaces, and wherein the connecting node is constructed to at least one of read, alter, and block data exchanged between the communications network and the network element;

a circuit element comprising a memory; and

a data path for communicatively coupling the first interface and the second interface, wherein;

the at least one of the network elements is a control unit connected to other control units via the communications network,

the circuit element is connected to the data path by data lines, the circuit element is configured to read additional information accompanying the data exchanged at the interfaces with the aid of the data lines and to continuously compare the additional information with presets stored in the memory,

the additional information includes at least one of a Controller Area Network (CAN) ID, an Ethernet address, and an Internet Protocol (IP) address, and

the circuit element is configured to alter data with the aid of the data lines and depending on the comparison.

20. The communications network as recited in claim 19, wherein the communications network corresponds to a bus system of a motor vehicle.

21. The communications network as recited in claim 19, wherein the at least one connecting node is disposed in the communications network as a supplement to a monitor disposed in the network element.

22. The communications network as recited in claim 19, wherein the communications network is constructed to transfer data using at least one of asynchronous and non-deterministic protocols, including Carrier Sense Multiple Access (CSMA) protocols in one of a Controller Area Network (CAN) bus system, an Ethernet system, and an IP system.

23. A method for operating a communications network including means for connecting at least two network elements to each other, wherein at least one of the network elements is connected to the communications network via a connecting node, the connecting node comprising a first interface for connection of the network element to the connecting node;

a second interface for connection of the connecting node to the communications network;

a circuit element comprising a memory; and

a data path for communicatively coupling the first interface and the second interface, wherein the connecting node is constructed to enable an exchange of data between the communications network and the network element via the first and second interfaces, and wherein the connecting node is constructed to at least one of read, alter, and block data exchanged between the communications network and the network element, the method comprising;

with the use of a control unit, an independent channel, and the connecting node, data between the communications network and at least one network element are at least one of read, altered, and blocked, wherein;

the network element is a control unit connected to other control units via the communications network,

the circuit element is connected to the data path by data lines,

the circuit element is configured to read additional information accompanying the data exchanged at the interfaces with the aid of the data lines and to continuously compare the additional information with presets stored in the memory,

the additional information includes at least one of a Controller Area Network (CAN) ID, an Ethernet address, and an Internet Protocol (IP) address, and

the circuit element is configured to alter data with the aid of the data lines and depending on the comparison.

24. The method as recited in claim 23, wherein in the event of at least one of a malfunction and an overloading of the communications network, a communications structure of the communications network is altered by the at least one connecting node being controlled by the control unit.