Method for operating a control device

• US 20040199783A1
• Filed: 05/27/2004
• Published: 10/07/2004
• Est. Priority Date: 05/12/2001
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Tenbusch, Eberhard
• Granted Patent: US 7,406,717 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: B60W 2050/0005 Processor details or data handling, e.g. memory registers or chip architecture
• CPC Class Codes: G05B 19/0426 Programming the control sequence
• CPC Class Codes: G05B 2219/24042 Signature analysis, compare recorded with current data, if error then alarm
• CPC Class Codes: G05B 2219/24155 Load, enter program if device acknowledges received password, security signal
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges
• CPC Class Codes: G05B 2219/25265 Flash memory
• CPC Class Codes: G05B 2219/2637 Vehicle, car, auto, wheelchair
• CPC Class Codes: G06F 11/1433 during software upgrading

Abstract

The present invention relates to a method for operating a control unit for controlling or regulating a function of a motor vehicle. The control unit includes a programmable memory device. The control or regulation is realized by executing a computer program (P0) at least partially stored in the memory device and by using data (D0) stored at least partially in the memory device. In order to offer the most efficient protection against manipulation of the contents of the memory device by an unauthorized person, it is provided that, at least following a modification of the computer program (P0) stored in the memory device or of the data (D0) stored in the memory device, the modified computer program (P1) is executed only and/or the modified data (D1) are used only if the modified computer program (P1) and/or the modified data (D1) has/have been successfully verified.

Claims

1-16. -16 (canceled).

17. A method of operating a control unit for controlling at least one function of a motor vehicle, the control unit controlling the at least one function by executing a computer program that is at least partially stored in a memory device associated with the control unit and by using data at least partially stored in the memory device, the method comprising:

verifying whether modification of at least one of the computer program at least partially stored in the memory device and the data at least partially stored in the memory device is authorized; and

at least one of executing a modified computer program and using a modified data only if the at least one of the modified computer program and the modified data has been verified as being authorized.

18. The method as recited in claim 17, wherein the modification of the at least one of the computer program and the data includes erasing of a first memory area of the memory device where the at least one of the computer program and the data is stored, and storing the at least one of the modified computer program and the modified data in the memory device.

19. The method as recited in claim 18, wherein the erasing of the first memory area of the memory device and the storing of the at least one of the modified computer program and the modified data in the memory device is initiated by a control program stored in the memory device.

20. The method as recited in claim 19, wherein the erasing of the first memory area where the at least one of the computer program and the data is stored is initiated only if the control program has been successfully copied as a backup into a second memory area outside of the first memory area to be erased.

21. The method as recited in claim 20, wherein, in addition to the at least one of the modified computer program and the modified data stored in the memory device, a modified control program is stored in the memory device.

22. The method as recited in claim 21, wherein, following the erasing of the memory device and the storing of the modified computer program in the memory device, erasing of the memory device and storing of the modified data is initiated only if the modified computer program has been verified as being authorized.

23. The method as recited in claim 20, wherein the storing of the at least one of the modified computer program and the modified data in the memory device is initiated by the copied backup of the control program.

24. The method as recited in claim 22, wherein verification of the at least one of the modified computer program and the modified data is initiated by the modified control program.

25. The method as recited in claim 17, further comprising:

storing the verification result in the control unit in a nonvolatile manner.

26. The method as recited in claim 25, further comprising:

storing test samples in memory areas of the memory device that contain the at least one of the modified computer program and the modified data that have been verified as being authorized.

27. The method as recited in claim 26, wherein, to verify the at least one of the modified computer program and the modified data, content of predefined locations of the memory device storing the at least one of the modified computer program and the modified data.

28. The method as recited in claim 17, wherein one of a hash-total calculation and a signature check is used to verify the at least one of the modified computer program and the modified data.

29. A computer-readable medium for storing a control program for a control unit, the control program performing, when executed by a computing device of the control unit, the steps of:

verifying whether modification of at least one of a first computer program at least partially stored in a memory device and data at least partially stored in the memory device is authorized; and

at least one of executing a modified computer program and using a modified data only if the at least one of the modified computer program and the modified data has been verified as being authorized.

30. A control program for a control unit, the control program performing, when executed by a computing device of the control unit, the steps of:

verifying whether modification of at least one of a first computer program at least partially stored in a memory device and data at least partially stored in the memory device is authorized; and

at least one of executing a modified computer program and using a modified data only if the at least one of the modified computer program and the modified data has been verified as being authorized.

31. The control program as recited in claim 30, wherein the control program is stored on a flash memory device.

32. A control unit, comprising:

a programmable memory device storing at least a portion of a computer program and data;

a computing device for executing the computer program for performing a desired control using the data; and

means for implementing, at least following a modification of at least one of the computer program stored in the memory device and the data stored in the memory device, a verification of the at least one of the modified computer program and the modified data as being authorized, and for preventing at least one of an execution of the modified computer program and a use of the modified data until the at least one of the modified computer program and the modified data have been verified as being authorized.