Method and device for avoiding manipulation of a data transmission

Patent metadata

Field	Value
Publication number	US-9894081-B2
Application number	US-201715491663-A
Country	US
Kind code	B2
Filing date	Apr 19, 2017
Priority date	Apr 20, 2016
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A method and device for avoiding manipulation of a data transmission. A message containing a message authentication code is received at a processing unit, the message from the processing unit is transferred to a hardware module, a check value as a function of the received message is computed in the hardware module, the received message authentication code and the check value are compared in the hardware module, a result of the comparison is transferred from the hardware module to the processing unit as an output variable, the message authentication code received in the message from the processing unit is checked in the processing unit based on the output variable.

First claim

What is claimed is:

1. A method far avoiding manipulation of a data transmission, comprising:
receiving, at a processing unit, a message containing a message authentication code;
transferring the message from the processing unit to a hardware module;
computing, in the hardware module, a check value as a function of the received message;
comparing, in the hardware module, the received message authentication code and the check value;
transferring a value that indicates a result of the comparison and the check value from the hardware module to the processing unit;
checking, in the processing unit, the value that indicates the result of the comparison; and
checking, in the processing unit, the message authentication code received in the message at the processing unit based on the check value.

2. The method as recited in claim 1 , wherein the value of the result of the comparison is set to a value that signals that the received message authentication code and the check value match.

3. The method as recited in claim 1 , wherein the message authentication code is a cipher-based message authentication code.

4. A device for avoiding manipulation of a data transmission, the device comprising:
a processing unit; and
a hardware module;

the device designed to:
receive, at the processing unit, a message containing a message authentication code;
transfer the message from the processing unit to the hardware module;
compute, in the hardware module, a check value as a function of the received message;
compare, in the hardware module, the received message authentication code and the check value;
transfer a value that indicates a result of the comparison and the check value from the hardware module to the processing unit;
check, in the processing unit, the value that indicates the result of the comparison; and
check, in the processing unit, the message authentication code received in the message at the processing unit based on the check value.

5. A non-transitory computer readable storage medium on which is stored a computer program for avoiding manipulation of a data transmission, the computer program, when executed by a processor, causing the processor to perform:
receiving, at a processing unit, a message containing a message authentication code;
transferring the message from the processing unit to a hardware module;
computing, in the hardware module, a check value as a function of the received message;
comparing, in the hardware module, the received message authentication code and the check value;
transferring a value that indicates a result of the comparison and the check value from the hardware module to the processing unit;
checking, in the processing unit, the value that indicates the result of the comparison; and
checking, in the processing unit, the message authentication code received in the message at the processing unit based on the check value.

Assignees

• Bosch Gmbh Robert

Inventors

• Wagner Dirk
• Soenkens Andreas
• Ahnert Frank
• Schramm Juergen
• Hartgen Thomas
• Stadler Werner

Classifications

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L9/3242 Primary

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title