Communication module

Patent metadata

Field	Value
Publication number	US-12301552-B2
Application number	US-201917312387-A
Country	US
Kind code	B2
Filing date	Dec 12, 2019
Priority date	Dec 13, 2018
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

The invention relates to a communication module for transmitting data between at least one hardware component which is integrated into an internal network of a technical system and a back-end computer system which is connected to a packet-switched data network. The communication module has a device-proximal gateway and a network-proximal gateway, which are connected to one another via a point-to-point connection without intermediate stations. The network-proximal gateway provides a data transmission interface between the packet-switched data network and the point-to-point connection and the device-proximal gateway provides a data transmission interface between the point-to-point connection and the internal network.

First claim

The invention claimed is:

1. A communication module for data transmission between at least one hardware component which is integrated into an internal network of a technical system and a back-end computer system which is connected to a packet-switched data network, characterized in that the communication module comprises:
a point-to-point connection, wherein communication is carried out via the point-to-point connection according to a non-routable protocol that prevents rerouting of communication and precludes unauthorized access to the internal network,
a device-proximal gateway is configured and arranged to provide a data transmission interface between the point-to-point connection and the internal network, and
a network-proximal gateway connected to the device-proximal gateway via the point-to-point connection without intermediate stations, the network-proximal gateway configured and arranged to provide a data transmission interface between the packet-switched data network and the point-to-point connection, wherein the point-to-point connection is the only connection between the network-proximal gateway and the device-proximal gateway, and wherein the network-proximal gateway is directly connected to the packet-switched data network without intermediate stations.

2. The communication module according to claim 1 , characterized in that the device-proximal gateway and/or the network-proximal gateway has a gateway security module.

3. The communication module according to claim 2 , characterized in that the at least one gateway security module has a card interface configured and arranged to receive a processor chip card.

4. The communication module according to claim 1 , wherein the point-to-point connection is a direct connection via a serial bus system.

5. A technical system comprising:
a communication module according to claim 1 ,
at least one hardware component, and
at least one internal network.

6. The technical system according to claim 5 , characterized in that the at least one hardware component has a security controller with an integrated cryptoprocessor, a non-volatile memory and a volatile memory.

7. The technical system according to claim 5 , characterized in that the technical system is a vehicle with one of autonomy levels 1 to 5.

8. The technical system according to claim 5 , characterized in that the technical system is a machine arrangement configured and arranged to be controlled by an automation system, in particular a test bench.

9. A method for the transmission of device data of a hardware component, which is integrated in an internal network of a technical system, to a back-end computer system which is connected to a packet-switched data network, the method including the following steps:
transmitting the device data from the hardware component via the internal network to a device-proximal gateway,
transmitting the device data from the device-proximal gateway via a point-to-point connection to a network-proximal gateway, wherein communication is carried out via the point-to-point connection according to a non-routable protocol that prevents rerouting of communication and precludes unauthorized access to the internal network, and wherein the point-to-point connection is the only connection between the network-proximal gateway and the device-proximal gateway,
converting the device data into an encrypted instance of the device data by the device-proximal gateway or the network-proximal gateway, and
transmitting the encrypted instance of the device data from the network-proximal gateway via the packet-switched data network to the back-end computer system, wherein the network-proximal gateway encrypts the encrypted instance of the device data before it is transmitted over the packet-switched data network in accordance with a network encryption protocol, and wherein the encrypted instance of the device data contains check data which allows the back-end computing system and/or another authorized data receiver to check the integrity and/or authenticity of the device data.

10. The method according to claim 9 , characterized in that the method further includes the following steps:
creating an encrypted instance of the device data using a public key of the back-end computer system by
the device-proximal gateway using the gateway security module of the device-proximal gateway, or
by the network-proximal gateway using the gateway security module of the network-proximal gateway.

11. The method according to claim 9 , characterized in that the step of transmitting the encrypted instance of the device data via the packet-switched data network includes transmitting the encrypted instance to a broker in accordance with a protocol that functions purely via push mechanisms.

12. A method for storing update data in a device memory of a hardware component integrated in an internal network, wherein the update data for the hardware component are provided by a back-end computer system and wherein the method including the following steps:
receiving an encrypted instance of the update data by a network-proximal gateway via a packet-switched data network from a back-end computer system,
transmitting the update data from the network-proximal gateway via a point-to-point connection to the device-proximal gateway, wherein communication is carried out via the point-to-point connection according to a non-routable protocol that prevents rerouting of communication and precludes unauthorized access to the internal network and the point-to-point connection is the only connection between the network-proximal gateway and the device-proximal gateway,
transmitting the update data to the hardware component via the internal network,
decrypting the encrypted instance of the update data by the device-proximal gateway or the network-proximal gateway, and
storing the decrypted update data in the device memory of the hardware component, wherein the encrypted instance of the update data contains check data which allows the gateway security module of the device-proximal gateway, and/or the gateway security module of the network-proximal gateway and/or the security controller of the hardware component, to check the integrity and/or authenticity of the update data.

13. The method according to claim 12 , characterized in that the encrypted instance of the update data is created by the back-end computer system and/or an authorized data transmitter using a public key of the hardware component and/or the device-proximal gateway and/or the network-proximal gateway.

14. The method according to claim 12 , characterized in that the method further includes the following steps:
decrypting the encrypted instance of the update data by
the network-proximal gateway using the gateway security module of the network-proximal gateway, or
the device-proximal gateway using the gateway security module of the device-proximal gateway.

15. The method according to claim 12 , characterized in that the update data includes firmware, application software and/or parameter data of the hardware component.

16. The method according to claim 12 , characterized in that the step of receiving an encrypted instance of the update data includes retrieving the encrypted instance of the update data from a broker and takes place in accordance with a protocol which functions purely via push mechanisms.

Assignees

• Avl List Gmbh

Inventors

• Aldrian Andreas
• Wolf Christoph
• Ma Zhendong
• Maier Patrik
• Sprung Samuel

Classifications

• H04L2012/40273

  the transportation system being a vehicle · CPC title

• H04L2012/4026

  Bus for use in automation systems · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L67/104 Primary

  Peer-to-peer [P2P] networks · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title