Method for cryptographically processing data

Patent metadata

Field	Value
Publication number	US-10291402-B2
Application number	US-201615005239-A
Country	US
Kind code	B2
Filing date	Jan 25, 2016
Priority date	Jan 26, 2015
Publication date	May 14, 2019
Grant date	May 14, 2019

Abstract

In a method for cryptographically processing data which are exchanged between a first unit and a control unit, a derived key is used in this process, which is derived from a secret key and an identifier. The exchanged data are encrypted using the derived key, and the exchanged data are encrypted in a tool chain, which provides the identifier.

First claim

What is claimed is:

1. A method for providing secure data communication within components of a motor vehicle, comprising:
receiving, by processing circuitry and from a tester, data to be encrypted;
deriving, by the processing circuitry, a derived key from (a) a secret key that is stored in a storage location of the motor vehicle, the storage location being locally accessible to a control unit of the motor vehicle and (b) an identifier;
the processing circuitry encrypting the data received from the tester using the derived key;
the processing circuitry encapsulating the encrypted data and the identifier in a container; and
the processing circuitry outputting the container to the control unit of the motor vehicle, based on which the control unit is configured to:
obtain the data by:
deriving the derived key from (a) the secret key that is stored in the storage location of the motor vehicle and (b) the identifier included in the container; and
decrypting the encrypted data included in the container using the derived key; and

process the decrypted data for testing for errors in the processing by the control unit of the decrypted data.

2. The method as recited in claim 1 , wherein the encryption is performed using a tool chain, which provides the identifier.

3. The method as recited in claim 2 , wherein a random number serves as the identifier.

4. The method as recited in claim 3 , wherein the derivation is performed using a public key infrastructure, which provides the secret key.

5. The method as recited in claim 3 , further comprising the control unit performing the decrypting in response to receipt of the encrypted data.

6. The method as recited in claim 5 , wherein the encrypted data are decrypted in a hardware security module of the control unit.

7. A data-exchange system within a motor vehicle for providing secure data communication, comprising:
processing circuitry configured to:
derive a derived key from (a) a secret key that is stored in a storage location of the motor vehicle, the storage location being locally accessible to a control unit of the motor vehicle and (b) an identifier;
encrypt data received by the processing circuitry from a tester, wherein the encryption is performed using the derived key;
encapsulate the encrypted data and the identifier in a container; and
output the container to the control unit of the motor vehicle, based on which the control unit is configured to:
obtain the data by:
deriving the derived key from (a) the secret key that is stored in the storage location of the motor vehicle and (b) the identifier included in the container; and
decrypting the encrypted data included in the container using the derived key; and

process the decrypted data for testing for errors in the processing by the control unit of the decrypted data.

Assignees

• Bosch Gmbh Robert

Inventors

• Kasper Bjoern
• Schwepp Thorsten
• Soenkens Andreas

Classifications

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04L2463/061

  applying further key derivation, e.g. deriving traffic keys from a pair-wise master key · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title