Detecting and resolving desynchronization of trip counter values in authenticated messages

Patent metadata

Field	Value
Publication number	US-11528162-B2
Application number	US-202016918847-A
Country	US
Kind code	B2
Filing date	Jul 1, 2020
Priority date	Jul 1, 2020
Publication date	Dec 13, 2022
Grant date	Dec 13, 2022

Abstract

Techniques for using a trip flag to detect desynchronization of trip counter values in a vehicle system. Techniques include a first electronic control unit (ECU) receiving a synchronization message including a trip counter and receiving a message from a second ECU including a trip flag. The trip flag includes a single bit of data generated by the second ECU. The first ECU compares the trip flag to a last bit of the trip counter stored at the first electronic control unit and processes the message in response to the trip flag matching the trip counter. The first ECU compares the trip counter to a previous trip counter based on the trip flag differing from the trip counter. The first ECU processes the message using the previous trip counter or increments the trip counter to process the message based on the comparison with the previous trip counter.

First claim

What is claimed is:

1. A vehicle system, comprising:
a freshness value master;
a first electronic control unit; and
a second electronic control unit communicatively coupled to the first electronic control unit and the freshness value master, the second electronic control unit comprising a memory having stored thereon instructions that, upon execution by one or more processors, cause the one or more processors to:
receive a synchronization message from the freshness value master, the synchronization message comprising a trip counter;
receive an authenticated message from the first electronic control unit, the authenticated message comprising a trip flag, the trip flag comprising a single bit of data;
compare the trip flag to a last bit of the trip counter to generate a result; and
process the authenticated message based on the result.

2. The vehicle system of claim 1 , wherein the result is that the trip flag matches the last bit of the trip counter, and wherein the instructions to process the authenticated message comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
process the authenticated message using the trip counter.

3. The vehicle system of claim 1 , wherein the result is that the trip flag differs from the last bit of the trip counter, and wherein the instructions to process the authenticated message comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
compare the trip counter with a previous trip counter of a previous authenticated message processed by the first electronic control unit;
process the authenticated message using the previous trip counter based on a determination that the trip counter differs from the previous trip counter; and
based on a determination that the trip counter matches the previous trip counter:
increase a value of the last bit of the trip counter to generate a new trip counter; and
process the authenticated message using the new trip counter.

4. The vehicle system of claim 1 , wherein the freshness value master transmits the synchronization message at a periodic interval.

5. The vehicle system of claim 1 , wherein the freshness value master increments the trip counter in response to a startup or a reset of the vehicle system.

6. The vehicle system of claim 1 , wherein the first electronic control unit is communicatively coupled to the second electronic control unit via a vehicle data bus.

7. The vehicle system of claim 6 , wherein the vehicle data bus is a Controller Area Network (CAN) bus.

8. A computer-implemented method, comprising:
receiving, at a first electronic control unit, a synchronization message from a freshness value master, the synchronization message comprising a trip counter;
receiving, at the first electronic control unit, an authenticated message from a second electronic control unit, the authenticated message comprising a trip flag comprising a single bit of data;
comparing the trip flag to a last bit of the trip counter to generate a result; and
processing the authenticated message based on the result.

9. The computer-implemented method of claim 8 , wherein the result is that the trip flag matches the last bit of the trip counter, and wherein processing the authenticated message comprises processing the authenticated message using the trip counter.

10. The computer-implemented method of claim 8 , wherein the result is that the trip flag differs from the last bit of the trip counter, and wherein processing the authenticated message comprises:
comparing the trip counter with a previous trip counter of a previous authenticated message processed by the first electronic control unit;
processing the authenticated message using the previous trip counter based on a determination that the trip counter differs from the previous trip counter; and
based on a determination that the trip counter matches the previous trip counter:
increasing a value of the last bit of the trip counter to generate a new trip counter; and
processing the authenticated message using the new trip counter.

11. The computer-implemented method of claim 8 , wherein the freshness value master transmits the synchronization message at a periodic interval.

12. The computer-implemented method of claim 8 , wherein the freshness value master increments the trip counter in response to a startup or a reset of a vehicle system.

13. The computer-implemented method of claim 8 , wherein the first electronic control unit is communicatively coupled to the second electronic control unit via a vehicle data bus.

14. The computer-implemented method of claim 13 , wherein the vehicle data bus is a Controller Area Network (CAN) bus.

15. A non-transitory, computer-readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to:
receive, at a first electronic control unit, a synchronization message from a freshness value master, the synchronization message comprising a trip counter;
receive, at the first electronic control unit, an authenticated message from a second electronic control unit, the authenticated message comprising a trip flag, the trip flag comprising a single bit of data;
compare the trip flag to a last bit of the trip counter to generate a result; and
process the authenticated message based on the result.

16. The non-transitory, computer-readable medium of claim 15 , wherein the result is that the trip flag matches the last bit of the trip counter, and wherein the instructions to process the authenticated message comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
process the authenticated message using the trip counter.

17. The non-transitory, computer-readable medium of claim 15 , wherein the result is that the trip flag differs from the last bit of the trip counter, and wherein the instructions to process the authenticated message comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
compare the trip counter with a previous trip counter of a previous authenticated message processed by the first electronic control unit;
process the authenticated message using the previous trip counter based on a determination that the trip counter differs from the previous trip counter; and
based on a determination that the trip counter matches the previous trip counter:
increase a value of the last bit of the trip counter to generate a new trip counter; and
process the authenticated message using the new trip counter.

18. The non-transitory, computer-readable medium of claim 15 , wherein the freshness value master transmits the synchronization message at a periodic interval.

19. The non-transitory, computer-readable medium of claim 15 , wherein the freshness value master increments the trip counter in response to a startup or a reset of a vehicle system.

20. The non-transitory, computer-readable medium of claim 15 , wherein the first electronic control unit is communicatively coupled to the second electronic control unit via a vehicle data bus.

Assignees

• Ford Global Tech Llc

Inventors

• Kajuluri Venkata Kishore
• Ye Xin
• Smith Bradley Warren

Classifications

• H04L12/40 Primary

  Bus networks · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title

• G05B23/0213 Primary

  Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols · CPC title

• H04L2012/40273

  the transportation system being a vehicle · CPC title

• H04W4/48

  for in-vehicle communication · CPC title