Tachograph, Toll Onboard Unit, Display Instrument, and System

• US 20100250053A1
• Filed: 09/25/2008
• Published: 09/30/2010
• Est. Priority Date: 09/28/2007
• Status: Active Grant

• Current Assignee: Continental Automotive GmbH (Continental AG)
• Original Assignee: Continental Automotive GmbH (Continental AG)
• Inventors: Lo Conte, Raphael, Grill, Thomas, Hess, Erwin, Rombach, Gerhard
• Granted Patent: US 9,196,099 B2
• Time in Patent Office: Days
• US Class Current: 701/33
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40234 Local Interconnect Network LIN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A tachograph and a toll onboard unit as communication partners, which each have a data interface for a data communication via a vehicle data bus to which the communication partners are coupled. The tachograph and/or the toll onboard unit are implemented as a transmitter of data to ascertain a cryptographic check value as a function of user data, which are to be transmitted to the communication partner, and to transmit the cryptographic check value in addition to the user data to the communication partner. The toll onboard unit or the tachograph, respectively, as a receiver of data, is implemented to receive user data and the cryptographic check value associated with the user data from the communication partner and to check the received user data for corruption as a function of the received cryptographic check value.

Claims

1-27. -27. (canceled)

28. A system comprising:

a vehicle data bus;

a tachograph having a first data interface configured as a first vehicle data bus interface for coupling to the vehicle data bus; and

a toll onboard unit having a second data interface configured as a second vehicle data bus interface for coupling to the vehicle data bus, the toll onboard unit and the tachograph configured as communication partners for data communication;

at least one of the tachograph and the toll onboard unit is configured as a data transmitter configured to;

determine a cryptographic check value based at least in part on payload data transmitted via the data interface to the respective communication partner, and

transmit the cryptographic check value in addition to the payload data to the respective communication partner; and

at least one of the toll onboard unit and the tachograph is configured as a data receiver to;

receive the payload data and the cryptographic check value associated with the payload data via the data interface from the respective communication partner, and

check the received payload data for corruption based at least in part on the received cryptographic check value.

29. The system as claimed in claim 28, wherein the payload data transmitted from the tachograph and received by the toll onboard unit comprises at least one of speed data, route data, and an up-to-date mileage, determined by at least one of the tachograph and sensors coupled to the tachograph, time data, identification data of a driver, identification data of a company, and identification data of a vehicle.

30. The system as claimed in claim 28, wherein the payload data to be transmitted from the toll onboard unit and received the tachograph comprises time at least one of information and position information from a position-finding unit.

31. The system as claimed claim 28, further comprising a display instrument as a further communication partner for data communication, which comprises:

a third data interface configured as a third vehicle data bus interface for coupling to the vehicle data bus a data interface such that the data communication takes place via the vehicle data bus, the display instrument configured to receive the payload data and the cryptographic check value associated with the payload data via the data interface from the respective communication partner, and to check the received payload data for corruption based at least in part on the received cryptographic check value.

32. The system as claimed in claim 31, wherein the display instrument is a transmitter of data configured to determine the cryptographic check value based at least in part on the payload data that is transmitted via the third data interface to the respective communication partner, and to transmit the cryptographic check value and the payload data to the respective communication partner.

33. The system as claimed in claim 31, wherein the display instrument comprises at least one secure memory configured to store at least of a cryptographic key, a current mileage, identification data of a driver, identification data of a company, identification data of a vehicle, setting parameters for components in the vehicle, and diagnostics data relating to the vehicle.

34. The system as claimed in claim 31, wherein the display instrument comprises at least one housing protective device and a housing, whereby opening the housing of the display instrument can be identified.

35. The system as claimed in claim 34, wherein the housing protective device comprises a housing switch.

36. The system as claimed in claim 31, wherein the display instrument further comprises a fourth data interface configured as a fourth vehicle data bus interface for coupling to the vehicle data bus a data interface such that the data communication takes place via the vehicle data bus, the display instrument configured as a connecting unit for data communication between communication partners be coupled to different ones of the third and fourth data interfaces, the display instrument further configured to at least one of relay received payload data, check the received payload data, authenticate the received payload data, and to authenticate the communication partners.

37. The system as claimed in claim 36, wherein the payload data comprises one of a software, which can be executed, and forms software, which can be executed.

38. The system as claimed in claim 37, wherein the display instrument further comprises a microprocessor configured to execute the software, which can be executed.

39. The system as claimed in claim 37, wherein the display instrument is configured to relay the software, which can be executed to at least one of the communication partners after at least one of successful checking and authentication of the software, which can be executed.

40. The system as claimed in claim 31, wherein the display instrument forms at least part of a convenience device control unit, a diagnosis interface unit, an identification unit for identification of a person, and an access monitoring unit, and an immobilizer unit.

41. The system as claimed in claim 31, wherein

each of the communication partners comprises at least one secure memory for storage of at least one cryptographic key,

at least one of the communication partners is configured to produce at least one cryptographic key and for encrypted transmission of the at least one cryptographic key that is produced to at least one of the respective communication partners,

the communication partners are configured to receive and decrypt the at least one encrypted cryptographic key, and for secure storage of the at least one cryptographic key in their respective secure memory, and

the communication partners are configured to determine the cryptographic check value as a function of the at least one cryptographic key.

42. The system as claimed in claim 41, wherein the communication partners are configured to determine the cryptographic check value as a message authentication code based at least in part on the at least one cryptographic key.

43. The system as claimed in claim 41, wherein the communication partners are configured to determine the cryptographic check value as a shortened message authentication code based at least in part on the at least one cryptographic key.

44. The system as claimed in claim 41, wherein the communication partners are configured to transmit the cryptographic check value with the associated payload data in one message.

46. The system as claimed in claim 31, wherein at least one of the communication partners is configured to authenticate itself with its respective at least one communication partner.

47. The system as claimed claim 31, wherein the toll onboard unit and the display instrument are configured to authenticate themselves with the tachograph and, in the event of successful authentication, to allow trustworthy data communication between at least one of:

the tachograph and at least one of the toll onboard unit and the display instrument, and

the toll onboard unit and the display instrument,

whereby if there is no a successful authentication, to prevent trustworthy data communication based on the check of the respectively received payload data.

48. The system as claimed in claim 41, wherein at least one of the communication partners is configured to automatically produce and transmit the at least one cryptographic key and the authentication based on an occurrence of at least one predetermined event.

49. The system as claimed in claim 31, wherein at least one of the communication partners comprises an interface to an external unit, and is configured to at least one of:

determine an external unit cryptographic check value and transmit the external unit cryptographic check value and the payload data to the external unit, and

receive payload data and the cryptographic check value from the external unit and to check the received payload data for corruption based at least in part on the received cryptographic check value.

50. The system as claimed in claim 31, wherein at least one of the communication partners is configured to encrypt the payload data to be transmitted, and at least one other of the communication partners is configured to decrypt the received encrypted payload data.

51. The system as claimed in claim 31, further comprising at least one of:

a traffic telematics unit,

an engine control unit for controlling one of an internal combustion engine and at least one electric motor,

a convenience device control unit,

a diagnosis interface unit,

an identification unit for identification of a person, and

an access monitoring unit as communication partner for data communication,

each of which comprises a respective data interface configured for the vehicle data bus interface such that the data communication takes place via the vehicle data bus, to which the at least one of the traffic telematics unit, the engine control unit, the convenience device control unit, the diagnosis interface unit, the identification unit and the access monitoring unit are coupled.

52. A tachograph, comprising

a data interface configured as a vehicle data bus interface, such that data communication takes place with at least one communication partner via a vehicle data bus, to which the tachograph and the respective communication partner are coupled, the tachograph is configured to

determine a cryptographic check value as a function of payload data, for transmission via the data interface to the respective at least one communication partner, and to transmit the cryptographic check value in addition to the payload data to the respective communication partner, and

receive the payload data and the cryptographic check value associated with the payload data, via the data interface, from the respective at least one communication partner, and to check the received payload data for corruption, based at least in part on the received cryptographic check value.

53. A toll onboard unit comprising:

a data interface configured as a vehicle data bus interface, such that data communication takes place with at least one communication partner via a vehicle data bus, to which the toll onboard unit and the respective communication partner are coupled, and which toll onboard unit is configured to

determine a cryptographic check value as a function of payload data, for transmission via the data interface to the respective at least one communication partner, and to transmit the cryptographic check value in addition to the payload data to the respective communication partner, and

receive the payload data and the cryptographic check value associated with the payload data, via the data interface, from the respective at least one communication partner, and to check the received payload data for corruption, based at least in part on the received cryptographic check value.

54. A display instrument, comprising:

a data interface configured as a vehicle data bus interface, such that data communication takes place with at least one communication partner via a vehicle data bus, to which the toll onboard unit and the respective communication partner are coupled, and which toll onboard unit is configured to

determine a cryptographic check value as a function of payload data, for transmission via the data interface to the respective at least one communication partner, and to transmit the cryptographic check value in addition to the payload data to the respective communication partner, and

receive the payload data and the cryptographic check value associated with the payload data, via the data interface, from the respective at least one communication partner, and to check the received payload data for corruption, based at least in part on the received cryptographic check value (PW).