Efficient distribution of processes between a vehicle control computing device and a cryptographic module, and method for operation thereof

Patent metadata

Field	Value
Publication number	US-11960611-B2
Application number	US-201917312600-A
Country	US
Kind code	B2
Filing date	Nov 27, 2019
Priority date	Dec 17, 2018
Publication date	Apr 16, 2024
Grant date	Apr 16, 2024

Abstract

A computing device, in particular, for a control unit of a motor vehicle. The computing device is configured to receive messages from at least one external unit. The computing device is configured to store the received messages at least temporarily and to transmit a plurality of the received messages to a cryptographic module, which is configured to execute a check of the transmitted messages.

First claim

What is claimed is:

1. A computing device for control of a motor vehicle comprising:
at least one processor, wherein the at least one processor is configured to:
receive from at least one external unit (a) first messages for processing for the motor vehicle control and (b) subsequent to the receipt of the first messages, second messages for processing for the motor vehicle control;
provide the first messages to a cryptographic module;
while the at least one processor performs the processing of the first messages after the cryptographic module has provided a result an authentication procedure executed for the first messages that had been provided to the cryptographic module, store individual respective ones of the second messages at least temporarily into a memory, message by message, as the individual respective ones of the second messages are received by the at least one processor without providing any of the individual respective ones of the received second messages to the cryptographic module; and
after the storing of all of the received second messages and responsive to (a) expiration of a predefined time period during which the receipt of the second messages occurred or (b) a number of the received second messages reaching a predefined threshold number, provide all of the stored second messages to the cryptographic module, which is configured to execute the authentication procedure respectively for each of the second messages individually, the respective authentication procedure including (a) a respective check of whether the respective individual one of the second messages provided to the cryptographic module is authentic or (b) a respective assignment of a respective cryptographic signature to the respective individual one of the second messages.

2. The computing device as recited in claim 1 , wherein the authentication procedure includes the check, and the at least one processor is configured to perform the processing of the second messages in response to a result of the check received from the cryptographic module being that the second messages authentic.

3. The computing device as recited in claim 1 , wherein the provision of the second messages to the cryptographic module is performed responsive to the number of the received second messages reaching the predefined threshold number.

4. The computing device as recited in claim 1 , wherein the provision of the second messages to the cryptographic module is performed responsive to the expiration of the predefined time period.

5. The computing device as recited in claim 1 , wherein the memory is a storage device that is accessible to both the computing device and the cryptographic module, and wherein the provision of the second messages to the cryptographic module includes transferring first control information items that characterize a storage area of the storage device in which the received second messages are stored for retrieval by the cryptographic module.

6. The computing device as recited in claim 5 , wherein the first control information items include, for each one of the received second messages, at least a respective pointer and/or a respective index number of the respective received second message.

7. The computing device as recited in claim 1 , wherein the at least one processor is configured to transfer to the cryptographic module control information items that characterize a storage area and/or an address in a storage device, in which storage area and/or at which address the cryptographic module should write results of the check or the cryptographic signatures.

8. The computing device as recited in claim 1 , wherein, for each of the received messages, the at least one processor is configured to delay the processing of the respective message until after the cryptographic module completes the authentication procedure for the respective message.

9. The computing device as recited in claim 1 , wherein the cryptographic module is integrated in the computing device, and/or the cryptographic module is situated on the same semiconductor substrate as the at least one processor.

10. A method of a computing device for control of a motor vehicle, the method comprising:
receiving, by at least one processor of the computing device and from at least one external unit, (a) first messages for processing for the motor vehicle control and (b) subsequent to the receipt of the first messages, second messages for processing for the motor vehicle control;
while the at least one processor performs the processing of the first messages after the cryptographic module has provided a result an authentication procedure executed for the first messages that had been provided to the cryptographic module, storing, by the computing device, individual respective ones of the received second messages at least temporarily into a memory, message by message, as the individual respective ones of the second messages are received by the at least one processor without providing any of the individual respective ones of the received second messages to the cryptographic module; and
after the storing of all of the received second messages and responsive to (a) expiration of a predefined time period during which the receipt of the second messages occurred or (b) a number of the received second messages reaching a predefined threshold number, providing, by the at least one processor, all of the stored second messages to the cryptographic module, which is configured to execute the authentication procedure respectively for each of the second messages individually, the respective authentication procedure including (a) a respective check of whether the respective individual one of the second messages provided to the cryptographic module is authentic or (b) a respective assignment of a respective cryptographic signature to the respective individual one of the second messages.

11. A cryptographic module for a computing device for control of a motor vehicle, the cryptographic module configured to:
while at least one processor of the computing device performs processing of a plurality of first messages received by the at least one processor from at least one external unit for the motor vehicle control, receive, as a single message block, a plurality of second messages from the computing device that were previously received individually by the computing device from at least one external unit, wherein the receipt as the single message block is due to a delay by the at least one processor to provide the second messages until (a) expiration of a predefined time period during which the receipt of the second messages by the computing device occurred or (b) a number of the second messages received by the computing device reaches a predefined threshold number;
execute an authentication procedure respectively for each of the second messages individually, the respective authentication procedure including (a) a respective check of whether the respective individual one of the second messages received by the cryptographic module is authentic or (b) a respective assignment of a respective cryptographic signature to the respective individual one of the second messages; and
provide results of the authentication procedure to the computing device, the at least one processor of which is configured to delay the processing of any respective one of the second messages for the motor vehicle control until after a respective one of the results of the authentication procedure corresponding to the respective one of the second messages is received by the computing device from the cryptographic module.

12. The cryptographic module as recited in claim 11 , wherein the check is carried out using a ciphe

Assignees

• Bosch Gmbh Robert

Inventors

• Pohl Christopher
• Stumpf Frederic

Classifications

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L12/403 Primary

  with centralised control, e.g. polling · CPC title

• H04L2012/40273

  the transportation system being a vehicle · CPC title