Data processing device and method for operating a data processing device

Patent metadata

Field	Value
Publication number	US-2025317293-A1
Application number	US-202519171668-A
Country	US
Kind code	A1
Filing date	Apr 7, 2025
Priority date	Apr 9, 2024
Publication date	Oct 9, 2025
Grant date	—

Abstract

A data processing device for a control device. The data processing device has at least a first computing unit and a second computing unit. The first computing unit includes a first memory device, which is configured to provide first data to be sent, a first cryptography unit, which is configured to encrypt the first data to be sent, and a first serial communication interface, which is configured to send the first, encrypted data to be sent from the first computing unit to the second computing unit. The second computing unit includes a second serial, communication interface, which is configured to receive the first, encrypted data from the first computing unit, a second cryptography unit, which is configured to decrypt the first, received, encrypted data, and a second memory device, which is configured to store the first, received, decrypted data.

First claim

1 - 16 . (canceled)

17 . A data processing device for a control device, the data processing device comprising:
at least a first computing unit and a second computing unit; wherein the first computing unit includes a first memory device configured to provide first data to be sent, a first cryptography unit configured to encrypt the first data to be sent, and a first serial communication interface configured to send the encrypted first data to be sent from the first computing unit to the second computing unit; and wherein the second computing unit includes a second serial communication interface configured to receive the encrypted first data from the first computing unit, a second cryptography unit configured to decrypt the received encrypted first data, and a second memory device which is configured to store the decrypted received first data.

18 . The data processing device according to claim 17 , wherein the second memory device is configured to provide second data to be sent, the second cryptography unit is configured to encrypt the second data to be sent, and the second communication interface is configured to send the encrypted second data to be sent from the second computing unit to the first computing unit, wherein the first communication interface is configured to receive the encrypted second data from the second computing unit, the first cryptography unit is configured to decrypt the received encrypted second data, and the first memory device is configured to store the decrypted received second data.

19 . The data processing device according to claim 18 , wherein the first memory device is configured to temporarily store the encrypted first data to be sent prior to sending and/or to temporarily store the encrypted second data received from the second computing unit prior to decryption and/or the second memory device is configured to temporarily store the encrypted second data to be sent prior to sending and/or to temporarily store the encrypted first data received from the first computing unit prior to decryption.

20 . The data processing device according to claim 17 , wherein the first memory device is configured to store the unencrypted first data to be sent and the encrypted first encrypted data to be sent in different areas in the first memory device and/or the second memory device is configured to store the received encrypted first data and the unencrypted received first data in different areas in the second memory device.

21 . The data processing device according to claim 17 , wherein the first communication interface is configured to send a set of first data to be encrypted and sent only when the set of first data to be encrypted and sent has been completely encrypted by the first cryptography unit and/or the second cryptography unit is configured to decrypt a received set of first data to be decrypted only when the received set of first data to be decrypted has been completely received by the second communication interface.

22 . The data processing device according to claim 18 , wherein the second communication interface is configured to send a set of second data to be encrypted and sent only when the set of second data to be encrypted and sent has been completely encrypted by the second cryptography unit and/or the first cryptography unit is configured to decrypt a received set of second data to be decrypted only when the received set of second data to be decrypted has been completely received by the first communication interface.

23 . The data processing device according to claim 18 , wherein the first cryptography unit includes a first cryptography module and a second cryptography module and/or the second cryptography unit includes a third cryptography module and a fourth cryptography module, wherein the first cryptography module and the third cryptography module are configured to encrypt data to be sent and the second cryptography module and the fourth cryptography module are configured to decrypt data to be received.

24 . A control device, comprising:
at least one data processing device including:
at least a first computing unit and a second computing unit,
wherein the first computing unit includes a first memory device configured to provide first data to be sent, a first cryptography unit configured to encrypt the first data to be sent, and a first serial communication interface configured to send the encrypted first data to be sent from the first computing unit to the second computing unit, and
wherein the second computing unit includes a second serial communication interface configured to receive the encrypted first data from the first computing unit, a second cryptography unit configured to decrypt the received encrypted first data, and a second memory device which is configured to store the received decrypted first data.

25 . A method for operating a data processing device, the data processing device including at least a first computing unit and a second computing unit, wherein the first computing unit includes a first memory device configured to provide first data to be sent, a first cryptography unit configured to encrypt the first data to be sent, and a first serial communication interface configured to send the encrypted first data to be sent from the first computing unit to the second computing unit, and wherein the second computing unit includes a second serial communication interface configured to receive the encrypted first data from the first computing unit, a second cryptography unit configured to decrypt the received encrypted first data, and a second memory device which is configured to store the received decrypted first data, the method comprising the following steps:
performing:
(i) providing the first data to be sent using the first memory device,
encrypting the first data to be sent using the first cryptography unit, and
sending the encrypted first data using a first serial communication interface; and/or
(ii) receiving the first encrypted data using the second serial communication interface,
decrypting the received first encrypted data using a second cryptography unit, and
storing the decrypted received first data using a second memory device.

26 . The method according to claim 25 , further comprising the following steps:
performing:
(i) providing second data to be sent using the second memory device,
encrypting the second data to be sent using the second cryptography unit,
sending the encrypted second data using the second communication interface; and/or
(ii) receiving second encrypted data using the first communication interface,
decrypting the received second encrypted data using the first cryptography unit, and
storing the decrypted received second data using the first memory device.

27 . The method according to claim 26 , wherein: (i) the first memory device temporarily stores the encrypted first data to be sent prior to sending and/or temporarily stores the encrypted second data received from the second computing unit prior to decryption and/or the second memory device temporarily stores the encrypted second data to be sent prior to sending and/or temporarily stores the encrypted first data received from the first computing unit prior to decryption.

28 . The method according to claim 25 , wherein the first memory device stores the unencrypted first data to be sent and the encrypted first data to be sent in different areas in the first memory device and/or the second memory device stores the received encrypted first data and the unencrypted received first data in different areas in the second memory device.

29 . The method according to claim 25 , wherein: (i) the

Assignees

• Bosch Gmbh Robert

Inventors

• Kaya Idris
• Becker Eugen
• Nottensteiner Franz
• Schreiber Matthias

Classifications

• G06F13/4068

  Electrical coupling · CPC title

• G06F13/4282

  on a serial bus, e.g. I2C bus, SPI bus (on daisy chain buses G06F13/4247) · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• G06F21/606 Primary

  by securing the transmission between two devices or processes · CPC title

• H04L9/32 Primary

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title