Control Area Network Data Encryption System and Method

• US 20090169007A1
• Filed: 12/23/2008
• Published: 07/02/2009
• Est. Priority Date: 12/31/2007
• Status: Abandoned Application

• Current Assignee: Clark Equipment Company (Doosan Enerbility Company Limited)
• Original Assignee: Clark Equipment Company (Doosan Enerbility Company Limited)
• Inventors: Vasicheck, Shawn R.
• Application Number:
  US12/342,905
• Publication Number:
  US 20090169007A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: E02F 9/205 Remotely operated machines, e.g. unmanned vehicles E02F3/8866 takes precedence
• CPC Class Codes: E02F 9/26 Indicating devices E02F5/145 takes precedence
• CPC Class Codes: H04L 12/40013 Details regarding a bus controller
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A power machine is configured to carry an attachment which is detachably coupleable to the power machine. The power machine includes a supporting frame with an operating compartment from which an operator operates the power machine to actuate one or more actuators of the power machine. A sensing unit senses a change in an operating device of the power machine and generates data indicative of the change. A first controlling unit, positioned on and coupled to the power machine, receives the data from the sensing unit indicative of the change in the operating device, and generates in response a set of corresponding operating messages. An encryption module positioned on and coupled to the power machine uses a key to encrypt at least a first portion of the set of operating messages into encrypted messages. A first control-area-network (CAN) controller formats the encrypted messages into a CAN format, and the encrypted messages in the CAN format are transmitted over a CAN bus. At an attachment, the encrypted messages are received from the CAN bus, decrypted using the key, and used by a second controlling unit to execute instructions or acts.

Claims

1. A power machine configured to carry an attachment which is detachably coupleable to the power machine, the power machine comprising:

a supporting frame including an operating compartment from which an operator operates the power machine to actuate one or more actuators of the power machine;

a sensing unit which senses a change in an operating device of the power machine and generates data indicative of the change;

a first controlling unit positioned on and coupled to the power machine, the first control unit receiving the data from the sensing unit indicative of the change in the operating device and generating in response a set of corresponding operating messages;

an encryption module positioned on and coupled to the power machine, the encryption module configured to use a key to encrypt at least a first portion of the set of operating messages into encrypted messages;

a first control-area-network (CAN) controller which formats the encrypted messages into a CAN format; and

a CAN bus over which the encrypted messages in the CAN format are transmitted.

2. The power machine of claim 1, and further comprising:

a second CAN controller which receives the encrypted messages in the CAN format and reformats the encrypted message out of the CAN format;

a decryption module configured to use the key to decrypt the encrypted messages to obtain the at least first portion of the set of operating messages; and

a second controlling unit coupled to the decryption module which executes instructions or acts based on the decrypted at least first portion of the set of operating messages.

3. The power machine of claim 2, wherein the second CAN controller, the decryption module and the second controlling unit are positioned on and supported by the attachment.

4. The power machine of claim 2, wherein the second CAN controller is configured to provide the decryption module.

5. The power machine of claim 2, wherein the second controlling unit is configured to provide the decryption module.

6. The power machine of claim 2, and further comprising:

a first transceiver coupled between the first CAN controller and the CAN bus, the first transceiver transmitting the CAN format encrypted messages over the CAN bus; and

a second transceiver coupled between the CAN bus and the second CAN controller, the second transceiver receiving the CAN format encrypted messages from the CAN bus.

7. The power machine of claim 1, wherein the encryption module is configured to use the key to encrypt the at least first portion of the set of operating messages into the encrypted messages, while a second portion of the set of operating messages is transmitted over the CAN bus without encryption.

8. The power machine of claim 1, wherein the first controlling unit is configured to provide the encryption module.

9. The power machine of claim 1, wherein the first CAN controller is configured to provide the encryption module.

10. A power machine communication system, the power machine configured to carry an attachment which is detachably coupleable to the power machine, the power machine communication system comprising:

a sensing unit on the power machine which senses a change in an operating device of the power machine and generates data indicative of the change;

a first controlling unit positioned on and coupled to the power machine, the first control unit receiving the data from the sensing unit indicative of the change in the operating device and generating in response a set of corresponding operating messages;

an encryption module configured to use a key to encrypt at least a first portion of the set of operating messages into encrypted messages;

a first control-area-network (CAN) controller which formats the encrypted messages into a CAN format;

a CAN bus over which the encrypted messages in the CAN format are transmitted;

a second CAN controller which receives the encrypted messages in the CAN format and reformats the encrypted message out of the CAN format;

a decryption module configured to use the key to decrypt the encrypted messages to obtain the at least first portion of the set of operating messages; and

a second controlling unit coupled to the decryption module which executes instructions or acts based on the decrypted at least first portion of the set of operating messages.

11. The power machine communication system of claim 10, wherein the first controlling unit is configured to provide the encryption module.

12. The power machine communication system of claim 10, wherein the first CAN controller is configured to provide the encryption module.

13. The power machine communication system of claim 10, wherein the second CAN controller is configured to provide the decryption module.

14. The power machine communication system of claim 10, wherein the second controlling unit is configured to provide the decryption module.

15. The power machine communication system of claim 10, and further comprising:

a first transceiver coupled between the first CAN controller and the CAN bus, the first transceiver transmitting the CAN format encrypted messages over the CAN bus; and

a second transceiver coupled between the CAN bus and the second CAN controller, the second transceiver receiving the CAN format encrypted messages from the CAN bus.

16. The power machine communication system of claim 10, wherein the encryption module is configured to use the key to encrypt the at least first portion of the set of operating messages into the encrypted messages, while a second portion of the set of operating messages is transmitted over the CAN bus without encryption.