Method and Vehicle-to-X Communication System for Selectively Checking Data Security Sequences of Received Vehicle-to-X Messages

• US 20140020098A1
• Filed: 03/28/2012
• Published: 01/16/2014
• Est. Priority Date: 03/29/2011
• Status: Active Grant

• Current Assignee: Continental Teves AG & Co. OHG (Continental AG)
• Original Assignee: Continental Teves AG & Co. OHG (Continental AG)
• Inventors: Stahlin, Ulrich
• Granted Patent: US 9,531,737 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G08G 1/163 involving continuous checking
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/4061 Push-to services, e.g. push-to-talk or push-to-video
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A method for selectively checking data security sequences of received vehicle-to-X messages, in which a number of the vehicle-to-X messages are received and/or sent in an operating cycle of a vehicle-to-X communication system. In an operating cycle, a reliability assessment of the received vehicle-to-X message is performed by checking the data security sequence, an information content of the received messages is read without prior checking of the data security sequence. In the operating cycle, a subset of the number of received vehicle-to-X messages is selected on the basis of the information contents, and solely the data security sequences of selected vehicle-to-X messages are checked. This results in the advantage that a reliability assessment is no longer carried out on all the received vehicle-to-X messages before they are processed, thereby enabling a reduction in the checking capacity that must be reserved for checking the data security sequence.

Claims

1. A method for selectively checking data security sequences of received vehicle-to-X messages, comprising

receiving or sending a number of the vehicle-to-X messages in an operating cycle of a vehicle-to-X communication system,

wherein at least one of the vehicle-to-X messages forms a data security sequence,

wherein in the operating cycle, a reliability assessment of a received one of the vehicle-to-X messages is performed by checking the data security sequence, and

wherein in the operating cycle, an information content of the received vehicle-to-X message is read without prior checking of the data security sequence, and wherein in the operating cycle a subset of a number of the received vehicle-to-X messages is selected on the basis of the information contents, and solely the data security sequences of selected vehicle-to-X messages are checked.

2. The method as claimed in claim 1, further comprising in that the selection on the basis of the information contents takes into account at least one of the following factors:

an actual speed of a recipient,

a relative speed of the recipient with respect to a sender,

an activation status of a driver assistance system or a comfort system,

a distance between the recipient and sender,

an estimated time of entry of the sender into a critical zone around the recipient wherein the critical zone has an adaptable extent and outline,

an estimated time of intersection of the trajectories of motion of the sender and the recipient,

an estimated time of the recipient colliding with the sender,

an orientation of the recipient with respect to the sender,

a relative direction of travel of the recipient with respect to the sender, and

a road classification is made according to one or more of a permitted maximum speed, a lane width, a separation of lanes, a number of lanes, a proximity to built-up areas, and weather conditions.

3. The method as claimed in claim 1 further comprising in that the selection on the basis of the information contents takes into account a comparison of the information contents with information content of information detected by at least one surround sensor, wherein a vehicle-to-X message of the messages having information contents which match the information contents of information detected by the at least one surround sensor are not selected.

4. The method as claimed in claim 1 further comprising in that the selection on the basis of the information content takes into account an intervention in a vehicle control system that will be actuated by a processing of the vehicle-to-X messages, wherein the vehicle-to-X messages that causes an intervention in the vehicle control system on being processed is always selected.

5. The method as claimed in claim 1 further comprising in that the selection on the basis of the information contents takes into account a driver warning that will be actuated by a processing of the vehicle-to-X messages, wherein the vehicle-to-X messages that causes a warning on being processed is always selected.

6. The method as claimed in claim 1 further comprising in that the data security sequences are generated and allocated based on an infrastructure for generating and allocating public keys, wherein the data security sequences are encrypted by an elliptic curve algorithm.

7. The method as claimed in claim 1 further comprising in that in the operating cycle, a selection correction that follows the selection and precedes the check is carried out if the subset of the vehicle-to-X messages selected on the basis of the information content is greater than or less than the available checking capacity, wherein the selection correction fully utilizes an available checking capacity of the vehicle-to-X communication system.

8. The method as claimed in claim 7, further comprising in that the selection correction based on a statistical selection method takes into account at least one of the following factors:

a reception of more than one of the vehicle-to-X messages from a specific sender in the same operating cycle,

a result of the reliability assessment of at least one of the vehicle-to-X messages from the specific sender in at least one previous operating cycle, wherein on receiving more than one of the vehicle-to-X messages from the specific sender, not all of the vehicle-to-X messages from the specific sender are selected in the operating cycle, and wherein, depending on the result of the reliability assessment of at least one of the vehicle-to-X messages from the specific sender in at least one previous operating cycle, at least one of the vehicle-to-X messages received in the operating cycle from the specific sender is not selected.

9. The method as claimed in claim 1 further comprising in that the received vehicle-to-X messages are forwarded to at least one driver assistance system and processed, wherein the at least one driver assistance system is designed to at least one of warn a driver, intervene in the vehicle control system, and to override a driver instruction.

10. A vehicle-to-X communication system (101) for selectively checking data security sequences of received vehicle-to-X messages, comprising a sending module (102) and a receiving module (103), a checking module (106) and a readout module (104),

wherein the sending module (102) is configured to send the vehicle-to-X messages,

wherein the receiving module (103) is configured to receive the vehicle-to-X messages,

wherein in one operating cycle of the vehicle-to-X communication system (101), a number of the vehicle-to-X messages are at least one of sent, received, read, and checked,

wherein the vehicle-to-X messages each form a data security sequence,

wherein in the operating cycle, the readout module (104) is configured to read information contents of the received vehicle-to-X messages without prior checking of the data security sequence, and

wherein the checking module (106) is configured to perform in the operating cycle a reliability assessment of the received vehicle-to-X messages by checking the one data security sequence in each of the messages, a selection module (105), which in the operating cycle selects on the basis of the information contents a subset of the number of the received vehicle-to-X messages.

11. The system as claimed in claim 10, further comprising in that at least one of the sending module (102), the receiving module, the readout module (104), and the selection module (105) comprise a shared chipset forming a shared processing unit (108).

12. The system as claimed in claim 10 further comprising in that at least one of the processing unit (108) of the sending module (102), the receiving module (103), the readout module (104), and the selection module (105) is assigned to a driver assistance system (111, 112, 113) or a vehicle control unit.

13. The system as claimed in claim 10 further comprising in that the checking module (106) forms a processing unit (109) having a dedicated design configured for checking cryptographic algorithms based on elliptic curves.

14. The system as claimed in claim 10 further comprising in that at least one of the sending module (102), and the receiving module (103) is designed to send or receive the vehicle-to-X messages by means of at least one of the following connection types:

a WLAN connection,

a ISM connection,

a Bluetooth®

connection,

a ZigBee connection,

a UWB connection,

a WiMax®

connection,

an infrared connection, and

a mobile communication connection.

15. The system as claimed in claim 10 further comprising in that the vehicle-to-X communication system is configured to implement a method comprising

receiving or sending a number of vehicle-to-X messages in an operating cycle of the vehicle-to-X communication system,

wherein at least one of the vehicle-to-X messages forms a data security sequence,

wherein in the operating cycle, a reliability assessment of a received one of the vehicle-to-X messages is performed by checking the data security sequence, and

wherein in the operating cycle, an information content of the received vehicle-to-X message is read without prior checking of the data security sequence, in the operating cycle, a subset of a number of the received vehicle-to-X messages is selected on the basis of the information contents, and solely the data security sequences of selected of the vehicle-to-X messages are checked.

16. The system as claimed in clam 10 incorporated into a motor vehicle.