Embedded system

• US 10,331,887 B2
• Filed: 11/15/2016
• Issued: 06/25/2019
• Est. Priority Date: 12/10/2015
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Huth, Christopher
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US15/351,854
• Publication Number:
  US 20170169221A1
• Time in Patent Office: 952 Days
• Field of Search: 726 23
• CPC Class Codes: G06F 1/28 Supervision thereof, e.g. detecting power-supply failure by out of limits supervision
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/75 by inhibiting the analysis of circuitry or operation
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 9/4406 Loading of operating system

Abstract

An embedded system wherein the system includes a computer, a watchdog, and an electrical power supply. The computer is electrically connected to the power supply. The power supply is connected in terms of measurement to the watchdog. The watchdog is configured in such a way that the watchdog measures a power consumption of the computer, ascertains a first power signature on the basis of the power consumption, carries out a comparison of the first power signature with a specified second power signature, and introduces specified measures if the comparison fails.

Claims

1. An embedded system, comprising:

a computer;

a watchdog; and

an electrical power supply, the computer being electrically connected to the power supply, the power supply being connected in terms of measurement to the watchdog;

wherein the watchdog is configured in such a way that the watchdog measures a power consumption of the computer, ascertains a first power signature on the basis of the power consumption, carries out a comparison of the first power signature with a specified second power signature, and introduces specified measures if the comparison fails,

wherein the watchdog is electrically connected to the power supply,

wherein the computer includes a microcontroller, a random-access memory, and data transmission paths, the transmission paths connect the microcontroller at least to the random-access memory, and the system is configured in such a way that the power consumption includes a first portion, measured between the power supply and the random-access memory, and a second portion, measured between the power supply and the microcontroller, and the watchdog is electrically connected to the power consumption of the first and second portions.

2. The embedded system as recited in claim 1, wherein the watchdog is connected in terms of signaling to the computer, and the system is configured in such a way that the measures include a restart of the computer.

3. The embedded system as recited in claim 1, wherein the computer includes in addition a read-only memory, the transmission paths connect the microcontroller to the read-only memory, and the system is configured in such a way that the power consumption in addition includes a third portion, measured between the power supply and the read-only memory.

4. The embedded system as recited in claim 3, wherein the system is configured in such a way that the measures include a loading of a trustworthy firmware from the read-only memory onto the microcontroller.

5. The embedded system as recited in claim 4, wherein the computer further includes a radio interface, the transmission paths connect the microcontroller to the radio interface, and the system is configured in such a way that the power consumption includes a fourth portion measured between the power supply and the radio interface.

6. The embedded system as recited in claim 5, wherein the second power signature is selected such that the comparison fails when the fourth portion indicates a reception of a large quantity of data via the radio interface, and the system is configured in such a way that the measures put the system into a sleep mode.

7. The embedded system as recited in claim 6, wherein the second power signature is selected such that the comparison fails when the fourth portion indicates a sending of data via the radio interface outside a specified time window.

8. The embedded system as recited in claim 6, wherein the second power signature is selected such that the comparison fails when the power consumption is above or below a specified threshold over a specified time span.