Abstract: A method for operating an electronic control unit (ECU) includes a normal mode and a protected mode. In the protected mode a new security artifact is stored in a microcontroller. The security artifact is transferred from the microcontroller to a microprocessor, and, after having received the security artifact, the microprocessor uses the security artifact for authenticating a program.

Abstract: The present disclosure concerns a safety system for a vehicle. The vehicle includes a tracking unit and at least one chassis sensor. The safety system may receive sensor data from the at least one chassis sensor and trusted data from the tracking unit, and then may detect an inconsistency between the sensor data and the trusted data. In response to the detection of the inconsistency, the safety system may block at least parts of the sensor data from the at least one chassis sensor.

Abstract: The present invention relates to a vehicle control unit that includes a microcontroller unit, a sealing controller unit including a memory for storing a validity state, an electrical connector configured to couple the microcontroller unit to the sealing controller unit, and a housing enclosing the microcontroller unit, the sealing controller unit, and the electrical connector. The microcontroller unit is configured to determine the validity state of the sealing controller unit via the electrical connector, and the sealing controller unit is configured to detect a mechanical change to the housing and to change the validity state when such a mechanical change is detected.

Abstract: A method for operating an electronic control unit (ECU) includes a normal mode and a protected mode. In the protected mode a new security artifact is stored in a microcontroller. The security artifact is transferred from the microcontroller to a microprocessor, and, after having received the security artifact, the microprocessor uses the security artifact for authenticating a program.

Abstract: The present invention relates to a vehicle control unit comprising a microcontroller unit, a sealing controller unit including a memory for storing a validity state, an electrical connector configured to couple the microcontroller unit to the sealing controller unit, and a housing enclosing the microcontroller unit, the sealing controller unit, and the electrical connector. The microcontroller unit is configured to determine the validity state of the sealing controller unit via the electrical connector, and the sealing controller unit is configured to detect a mechanical change to the housing and to change the validity state when such a mechanical change is detected.

Abstract: A method for transmitting data in packets between a first circuit element and a second circuit element includes sending the data by the first circuit element followed by a reception and a storage of the data by the second circuit element. A data transmission flow control operation detects an event signaling an imminent state of congestion of the data stored by the second circuit element. In response thereto, the control operation stops the sending of the data from the first circuit element to the second circuit element until a delay period expires and the event is no longer detected.