Granted Patent B2

US 12,463,983 · App. 18/554,475 · Granted Nov 4, 2025

Inventors: Michael Weiner (Munich, DE); Peter Winklhofer (Munich, DE); Robert Meinlschmidt (Munich, DE); Theresa Reiner (Munich, DE); Markus Anton (Munich, DE)

Assignee: Bayerische Motoren Werke Aktiengesellschaft

H04L63/126H04L63/1416

Abstract

Claims (33)

1 . A method for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device of the vehicle, the method comprising:

receiving a first message of a first control device of the vehicle via a first bus system using the second control device of the vehicle;

determining a bus system, which is associated with the received first message, using the second control device, and

if the determined bus system differs from the first bus system, then determining the received first message as an inadmissible message of the first bus system by means of the second control device;

identifying the first control device as the manipulated control device using the second control device if the received first message has been identified as an inadmissible message; and

providing an alarm message to a vehicle-external server using the second control device if the received first message has been identified as an inadmissible message,

wherein the second control device is an only trustworthy source of the first message.

2 . The method as claimed in claim 1 , wherein the second control device can be connected to at least two bus systems.

3 . The method as claimed in claim 2 , wherein the first bus system of the at least two bus systems comprises a bus system for transmitting diagnostic messages.

4 . The method as claimed in claim 3 , wherein the second bus system of the at least two bus systems comprises a bus system for transmitting application messages.

5 . The method as claimed in claim 2 , wherein the second bus system of the at least two bus systems comprises a bus system for transmitting application messages.

6 . The method as claimed in claim 2 , wherein the alarm message identifies the manipulated control device and/or the inadmissible message of the first bus system.

7 . The method as claimed in claim 1 , wherein the first message is an application message which is transmitted via the first bus system.

8 . A method for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device of the vehicle, the method comprising:

receiving a first message of a first control device of the vehicle via a first bus system using the second control device of the vehicle;

determining a bus system, which is associated with the received first message, using the second control device, and

if the determined bus system differs from the first bus system, then determining the received first message as an inadmissible message of the first bus system by means of the second control device;

identifying the first control device as the manipulated control device using the second control device if the received first message has been identified as an inadmissible message; and

providing an alarm message to a vehicle-external server using the second control device if the received first message has been identified as an inadmissible message,

wherein determining the bus system which is associated with the received first message comprises:

determining a message type of the received first message using the second control device;

determining a second message using the second control device of the vehicle, wherein the second message comprises a message type which corresponds to the determined message type of the first message;

determining a bus system that is associated with the determined second message; and

determining the bus system of the determined second message as the bus system which is associated with the received first message.

9 . The method as claimed in claim 8 , wherein the second message is a last successfully sent message of the second control device, said last successfully sent message having the message type of the received first message.

10 . The method as claimed in claim 9 , wherein the second message is a message for which the second control device is an only trustworthy message source on the bus system which is associated with the second message.

11 . The method as claimed in claim 10 , wherein the second message has been sent via the bus system which is associated with the second message prior to receiving the first message from the first control device and the second message has been stored using the second control device following a successful sending of the second message via the bus system which is associated with the second message.

12 . The method as claimed in claim 9 , wherein the second message has been sent via the bus system which is associated with the second message prior to receiving the first message from the first control device and the second message has been stored using the second control device following a successful sending of the second message via the bus system which is associated with the second message.

13 . The method as claimed in claim 12 , wherein the alarm message identifies the manipulated control device and/or the inadmissible message of the first bus system.

14 . The method as claimed in claim 1 , wherein the alarm message identifies the manipulated control device and/or the inadmissible message of the first bus system.

15 . A non-transitory computer-readable medium for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device of the vehicle, wherein the computer-readable medium comprises instructions which, if implemented on a control device of the vehicle, implement the method as claimed in claim 1 .

16 . A system for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device of the vehicle, wherein the system is designed so as to implement the method as claimed in claim 1 .

17 . A vehicle comprising the system for identifying an inadmissible message of a manipulated control device of the vehicle using a second control device of the vehicle as claimed in claim 16 .

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (10)