Method for operating a control unit

Patent metadata

Field	Value
Publication number	US-10025954-B2
Application number	US-201514705308-A
Country	US
Kind code	B2
Filing date	May 6, 2015
Priority date	May 12, 2014
Publication date	Jul 17, 2018
Grant date	Jul 17, 2018

Abstract

A method for operating a control unit, such a control unit, and an electronic hardware security module are provided. A manipulation of a main computer unit is detected by the electronic hardware security module, and a check takes place whether reprogramming is possible.

First claim

What is claimed is:

1. A method for operating a control unit, which has an electronic hardware security module surrounded by a physical shielding that prevents monitoring of the electronic hardware security module, and a main computer located outside the electronic hardware security module, the method comprising:
detecting, by the electronic hardware security module surrounded by the physical shielding that prevents monitoring of the electronic hardware security module, a manipulation of the main computer unit located outside of the electronic hardware security module;
performing, by the electronic hardware security module, a check of whether reprogramming of the main computer unit is possible, the performing the check of whether reprogramming is possible including determining whether a vehicle in which the control unit is located is stationary; and
initiating, by the electronic hardware security module, the reprogramming of the main computer unit upon the check indicting that the reprogramming is possible.

2. The method of claim 1 , wherein an alternative reaction is triggered if reprogramming is not possible.

3. The method of claim 1 , wherein software required for the reprogramming is stored in a non-volatile memory of the electronic hardware security module of the control unit.

4. The method of claim 1 , wherein the software required for the reprogramming is stored in a non-volatile memory of an electronic hardware security module of a further control unit.

5. The method of claim 1 , wherein the software required for the reprogramming is stored in a memory of a cloud.

6. The method of claim 5 , wherein the cloud is connected to the control unit.

7. The method of claim 5 , wherein the cloud is networked with a further control unit, which is networked with the control unit.

8. The method of claim 1 , wherein the step of performing a check of whether reprogramming is possible includes determining whether trusted code for reprogramming is available.

9. The method of claim 1 , wherein the electronic hardware security module is surrounded by an uninterrupted physical boundary.

10. The method of claim 9 , wherein the uninterrupted physical boundary includes a cryptographic boundary.

11. The method of claim 1 , further comprising:
continuously monitoring, by the electronic hardware security module, for a manipulation of the main computer unit.

12. The method of claim 1 , wherein the reprogramming is automatically performed by the electronic hardware security module in response to the detection of a manipulation of the main computer.

13. The method of claim 1 , wherein the electronic hardware security module includes a processor and a memory.

14. The method of claim 1 , wherein the main computer unit is located outside the physical shielding that prevents monitoring of the electronic hardware security module.

15. An electronic hardware security module, which is used in a control unit having a main computer unit, comprising:
a secure computer core surrounded by a physical shielding that prevents monitoring of the electronic hardware security module, wherein the secure computer core is configured to:
detect a manipulation of the main computer unit located outside the electronic hardware security module;
check whether reprogramming of the main computer unit is possible, the check of whether reprogramming is possible including determining whether a vehicle in which the control unit is located is stationary; and
initiate the reprogramming of the main computer unit upon the check indicting that the reprogramming is possible.

16. The electronic hardware security module of claim 15 , further comprising: a flash memory in which a software required for the reprogramming is stored.

17. The electronic hardware security module of claim 15 , further comprising a flash memory, surrounded by the physical shielding that prevents monitoring of the electronic hardware security module, in which a software required for the reprogramming is stored.

18. A control unit, comprising:
a main computer unit located outside of an electronic hardware security module; and
the electronic hardware security module, surrounded by a physical shielding that prevents monitoring of the electronic hardware security module, including:
a secure computer core configured to:
detect a manipulation of the main computer unit;
check whether reprogramming of the main computer unit is possible, the check of whether reprogramming is possible including determining whether a vehicle in which the control unit is located is stationary; and
initiate the reprogramming of the main computer unit upon the check indicting that the reprogramming is possible.

19. The control unit of claim 18 , wherein the electronic hardware security module further includes a flash memory, surrounded by the physical shielding that prevents monitoring of the electronic hardware security module, in which a software required for the reprogramming is stored.

Assignees

• Bosch Gmbh Robert

Inventors

• Emele Martin
• Keller Thomas
• Soenkens Andreas
• Schneider Stefan

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title

• G05B19/042 Primary

  using digital processors (G05B19/05 takes precedence) · CPC title

• G06F8/654

  using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories · CPC title

• G06F2221/2105

  Dual mode as a secondary aspect · CPC title