Method for Operating a Sensor Apparatus and Sensor Apparatus

• US 20110320064A1
• Filed: 11/23/2009
• Published: 12/29/2011
• Est. Priority Date: 12/12/2008
• Status: Active Grant

• Current Assignee: Continental Automotive GmbH (Continental AG)
• Original Assignee: Continental Automotive GmbH (Continental AG)
• Inventors: Plankenhorn, Horst, Schmidt, Gunnar
• Granted Patent: US 8,601,281 B2
• Time in Patent Office: Days
• US Class Current: 701/1
• CPC Class Codes: G01D 3/0365 the undesired influence being measured using a separate sensor, which produces an influence related signal
• CPC Class Codes: G01D 3/08 with provision for safeguarding the apparatus, e.g. against abnormal operation, against breakdown

Abstract

A sensor apparatus includes a housing with a security device, a secure first computation device, a second computation device (AC) and a sensor element. The sensor apparatus detects a temperature in the housing, to activate the first computation device only when the detected temperature is in a predefined temperature range, to determine a session key by the first computation device and to store the session key in a second memory of the second computation device, to deactivate the first computation device after the session key has been stored, to determine data on the basis of a sensor signal detected using the sensor element and to encrypt and/or sign the data by the second computation device on the basis of the session key.

Claims

1-15. -15. (canceled)

16. A method for operating a sensor apparatus that comprises:

a housing having a security device configured to detect unauthorized access to the housing;

a secure first computation device having a secure non-volatile first memory arranged in the housing;

a second computation device having a second memory or is assigned the second memory arranged in the housing with the second memory; and

at least one sensor element electrically coupled to the second computation device configured to supply a sensor signal to the second computation device,

the method comprising;

detecting a temperature in the housing;

activating the first computation device only when the detected temperature is in a predefined temperature range;

determining a session key by the first computation device;

storing the session key in the second memory;

deactivating the first computation device after the session key is stored in the second memory;

determining data based at least in part on the sensor signal; and

at least one of encrypting and signing the data by the second computation device based on the session key.

17. The method as claimed in claim 16, wherein the first computation device is one or more of activated and deactivated under the control of the second computation device.

18. The method as claimed in claim 16, further comprising:

checking the security device of the housing; and

activating the first computation device only when an integrity of the housing is determined from the checking of the security device.

19. The method as claimed in claim 16, wherein,

the first computation device:

stores the session key in the second memory;

reads from the first memory and stores in the second memory at least one of;

at least one program part,

at least one identification data item,

at least one parameter; and

the second computation device is operated using at least one of the at least one program, the at least one identification data item, and the at least one parameter.

20. The method as claimed in claim 16, further comprising:

monitoring one or more of the security device of the housing, at least one operating variable, and an ambient variable; and

deleting at least the session key from the second memory upon determining at least one of a violation of the integrity of the housing, an impermissible value, an impermissible change in the value of the at least one operating variable, and an ambient variable.

21. The method as claimed in claim 20, further comprising deleting from the second memory one or more of the at least one identification data item and the at least one parameter.

22. The method as claimed in claim 21, wherein deleting is effected by overwriting.

23. The method as claimed in claim 20, wherein at least one of:

the ambient variable is the temperature in the housing and

the operating variable is an operating voltage of the sensor apparatus.

24. A sensor apparatus comprising:

a housing;

a security device arranged in the housing configured to detect unauthorized intrusion into the housing;

a secure first computation device arranged in the housing having a secure non-volatile first memory;

a second computation device one of having a second memory and being assigned the second memory is arranged in the housing with the second memory; and

at least one sensor element that is electrically coupled to the second computation device and configured to supply a sensor signal to the second computation device, wherein the sensor apparatus is configured to;

detect a temperature in the housing

activate the first computation device only when the detected temperature is in a predefined temperature range

determine a session key by the first computation device;

store the session key in the second memory;

deactivate the first computation device after the session key has been stored in the second memory;

determine data based on the sensor signal; and

at least one of encrypt and sign the data by the second computation device based on the session key.

25. The sensor apparatus as claimed in claim 24, wherein the housing is formed from at least one printed circuit board on which at least one of the first and the second computation device is directly arranged.

26. The sensor apparatus as claimed in claim 25, wherein at least one of the first and the second computation device is integrated in the at least one printed circuit board.

27. The sensor apparatus as claimed in claim 26, wherein the security device comprises at least two layers of conductor are formed on the at least one printed circuit board at least in a region of the housing to be protected.

28. The sensor apparatus as claimed in claim 27, wherein the at least one sensor element is arranged in the housing.

29. The sensor apparatus as claimed in claim 28, wherein the at least one sensor element is configured as one of a Hall sensor element, an inductive sensor element, and a GMR sensor element.

30. The sensor apparatus as claimed in claim 24, wherein the at least one sensor senses a speed of a vehicle.

31. The sensor apparatus as claimed in claim 25, wherein the security device comprises at least two layers of conductor are formed on the at least one printed circuit board at least in a region of the housing to be protected.

32. The sensor apparatus as claimed in claim 29, wherein the sensor apparatus is configured as a speed sensor for a vehicle.