Abstract: A security module (460) for a CAN node (402). The security module (460) comprises: a RXD input interface for receiving data from a CAN bus (404), and a TXD output interface for transmitting data to the CAN bus (404). The security module (460) is configured to: receive a CAN frame from the CAN bus via the RXD input interface; compare an identifier of the received CAN frame with at least one identifier associated with a local controller (410); and upon detection of a match between the identifier of the received CAN frame and the at least one identifier associated with the local controller (410), output an error signal to the CAN bus via the TXD output interface by setting a predetermined plurality of consecutive bits (682) in the CAN frame to a dominant value. The predetermined plurality of consecutive bits (682) identifies a security error to CAN nodes connected to the CAN bus (404) and is at least 10 consecutive bits.

Abstract: A security module (560) for a CAN node (502). The security module (560) comprising: a RXD input interface (562) for receiving data from a CAN bus (504), TXD output interface (568) for transmitting data to the CAN bus (504), and a RXD output interface (564) for providing data to a local controller (510). The security module (560) is configured to receive a CAN frame from the CAN bus (504). The CAN frame includes a CAN message. The security module (560) is also configured to compare an identifier of the received CAN frame with at least one identifier associated with the local controller (510); and upon detection of a match between the identifier of the received CAN frame and the at least one identifier associated with the local controller (510): pass the received CAN message to the local controller (510) via the RXD output interface (564); decouple the local controller (510) from the CAN bus (504); and invalidate the CAN message on the CAN bus (504) via the TXD output interface (568).

Abstract: A security module (434) for a serial communications device. The security module (434) comprising: a receive data, RXD, input interface (436) for receiving data from a serial communications bus (404); and a transmit data, TXD, output interface (438) for transmitting data to the serial communications bus (404). The security module (434) is configured to: receive a message (540) from the serial communications bus (404) via the RXD input interface (436); compare the message (540) with one or more error conditions; and upon detection that an error condition has been violated, output an error-signal (543) to the serial communications bus (404) via the TXD output interface (438), wherein the error-signal (543) identifies one or more parameters relating to the error condition.

Abstract: The present disclosure relates to a bus device and a corresponding bus system. Furthermore, the present disclosure relates to a corresponding method of operating a bus device. In accordance with a first aspect of the present disclosure there is provided a bus device comprising a bus protocol controller with a transmit data output and a bus transceiver with a transmit data input coupled to the transmit data output of the bus protocol controller, wherein the bus protocol controller is configured to provide a serial bit stream designated for transmission through a bus via the transmit data output of the bus controller and via the transmit data input to the bus transceiver and to provide a switching signal within the serial bit stream, and wherein the bus transceiver is configured to switch between different operating modes in response to the switching signal.

Abstract: Aspects of the present disclosure are directed to assessing integrity of communications circuitry. As may be implemented in accordance with one or more embodiments, a circuit node carries out a test protocol utilizing characteristics of a communication protocol to detect potential integrity issues. An initial test bit sequence is transmitted to circuit nodes connected to signal lines of a bus, by providing a test voltage across the signal lines that is less than an operating voltage potential of the bus. An ensuing state of the bus is sensed, and integrity of the bus or of circuitry connected to the bus is assessed based on the sensed state of the bus and on a state that the bus is expected to be in after transmission of the initial test bit sequence, which is used as an indication of whether all of the circuit nodes received the initial test bit sequence.

Abstract: The present disclosure relates to a bus device and a corresponding bus system. Furthermore, the present disclosure relates to a corresponding method of operating a bus device. In accordance with a first aspect of the present disclosure there is provided a bus device comprising a bus protocol controller with a transmit data output and a bus transceiver with a transmit data input coupled to the transmit data output of the bus protocol controller, wherein the bus protocol controller is configured to provide a serial bit stream designated for transmission through a bus via the transmit data output of the bus controller and via the transmit data input to the bus transceiver and to provide a switching signal within the serial bit stream, and wherein the bus transceiver is configured to switch between different operating modes in response to the switching signal.

Abstract: Aspects of the present disclosure involving tuning clock signal sources for communication. As may be implemented in accordance with one or more embodiments, trustworthiness of a message or a source of the message is validated, as indicated by data received over a data bus that communicatively couples a plurality of circuits respectively including an independent clock signal source. Data sent between the circuits can be received by adaptively sampling data that is carried by the data bus. Timing information is calculated relative to data frames of the data received over the data bus, and a clock signal source at one of the circuits is tuned in response to the validating and the calculating.

Abstract: Embodiments of a method, a device and a computer-readable storage medium are disclosed. In an embodiment, a method for operating a Controller Area Network (CAN) device involves in response to receiving bits of an arbitration field of a CAN data frame at the CAN device, selecting a timing engine from a plurality of timing engines and sampling subsequent bits of the CAN data frame using the selected timing engine. The timing engines have different sample clock frequencies.

Abstract: Aspects of the present disclosure are directed to assessing integrity of communications circuitry. As may be implemented in accordance with one or more embodiments, a circuit node carries out a test protocol utilizing characteristics of a communication protocol to detect potential integrity issues. An initial test bit sequence is transmitted to circuit nodes connected to signal lines of a bus, by providing a test voltage across the signal lines that is less than an operating voltage potential of the bus. An ensuing state of the bus is sensed, and integrity of the bus or of circuitry connected to the bus is assessed based on the sensed state of the bus and on a state that the bus is expected to be in after transmission of the initial test bit sequence, which is used as an indication of whether all of the circuit nodes received the initial test bit sequence.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method for communicating data frames on a bus that operates according to a multi-master bus protocol is disclosed. The method involves beginning transmission of a data frame from a node on the bus when the node gains control of the bus, wherein the multi-master bus protocol specifies a frame format that includes a start portion, a payload portion, and an end portion, during transmission of the payload portion of the data frame, inserting an in-payload arbitration field into the transmission, continuing transmission of the data frame if the node maintains control of the bus after insertion of the in-payload arbitration field, and halting transmission of the data frame before transmission of the data frame is complete if the node losses control of the bus after insertion of the in-payload arbitration field.

Abstract: Aspects of the present disclosure involving tuning clock signal sources for communication. As may be implemented in accordance with one or more embodiments, trustworthiness of a message or a source of the message is validated, as indicated by data received over a data bus that communicatively couples a plurality of circuits respectively including an independent clock signal source. Data sent between the circuits can be received by adaptively sampling data that is carried by the data bus. Timing information is calculated relative to data frames of the data received over the data bus, and a clock signal source at one of the circuits is tuned in response to the validating and the calculating.

Abstract: Embodiments of a device and method are disclosed. A controller area network (CAN) device includes a compare module configured to interface with a CAN transceiver, the compare module having a receive data (RXD) interface configured to receive data from the CAN transceiver, a CAN decoder configured to decode an identifier of a CAN message received from the RXD interface, and an identifier memory configured to store an entry that corresponds to at least one identifier, and compare logic configured to compare a received identifier from a CAN message to the entry that is stored in the identifier memory and to output a match signal when the comparison indicates that the received identifier of the CAN message matches the entry that is stored at the CAN device. The CAN device also includes a signal generator configured to output, in response to the match signal, a signal to invalidate the CAN message.

Abstract: The present application relates to a system hosting a monotonic counter and a method of operating the system. The system comprises a non-volatile memory (110) for holding a save counter value and a volatile memory (120) for maintaining a current counter value. The system (100) is configured during a startup phase to retrieve the saved counter value of the monotonic counter from the non-volatile memory (110); to detect whether a previous shutdown of the system (100) was an uncontrolled shutdown; and to adjust the retrieved counter value in accordance with a step size (130) provided at the system (100) in case an previous uncontrolled shutdown is detected.

Abstract: A system for assigning addresses to a plurality of communication nodes coupled via a power line is disclosed. Each of the plurality of communication nodes includes a current sensor. The plurality of communication nodes includes one master communication node and the master communication node is configured to start an auto-addressing process by asking the each of the plurality of communication nodes to sink a preselect amount of current and measure current, through the current sensor, flowing through the powerline under the each of the plurality of communication nodes. A first communication node in the plurality of communication nodes that does not measure any current flowing under the first communication node is assigned a first address.

Abstract: The present application relates to a system hosting a monotonic counter and a method of operating the system. The system comprises a non-volatile memory (110) for holding a save counter value and a volatile memory (120) for maintaining a current counter value. The system (100) is configured during a startup phase to retrieve the saved counter value of the monotonic counter from the non-volatile memory (110); to detect whether a previous shutdown of the system (100) was an uncontrolled shutdown; and to adjust the retrieved counter value in accordance with a step size (130) provided at the system (100) in case an previous uncontrolled shutdown is detected.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method for controlling CAN traffic is disclosed. The method for controlling CAN traffic involves decoding bits of an identifier of a CAN message from a TXD path, obtaining a weighted value using the decoded bits of the identifier, adding the weighted value to a running weighted value for received CAN messages, and throttling transmission of CAN messages via the TXD path if the running weighted value exceeds a pre-established threshold.

Abstract: A system for assigning addresses to a plurality of communication nodes coupled via a power line is disclosed. Each of the plurality of communication nodes includes a current sensor. The plurality of communication nodes includes one master communication node and the master communication node is configured to start an auto-addressing process by asking the each of the plurality of communication nodes to sink a preselect amount of current and measure current, through the current sensor, flowing through the powerline under the each of the plurality of communication nodes. A first communication node in the plurality of communication nodes that does not measure any current flowing under the first communication node is assigned a first address.

Abstract: Embodiments of a method, a device and a computer-readable storage medium are disclosed. In an embodiment, a method for operating a Controller Area Network (CAN) device involves in response to receiving bits of an arbitration field of a CAN data frame at the CAN device, selecting a timing engine from a plurality of timing engines and sampling subsequent bits of the CAN data frame using the selected timing engine. The timing engines have different sample clock frequencies.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method for controlling CAN traffic is disclosed. The method for controlling CAN traffic involves decoding bits of an identifier of a CAN message from a TXD path, obtaining a weighted value using the decoded bits of the identifier, adding the weighted value to a running weighted value for received CAN messages, and throttling transmission of CAN messages via the TXD path if the running weighted value exceeds a pre-established threshold.

Abstract: Embodiments of a device and method are disclosed. A controller area network (CAN) device includes a compare module configured to interface with a CAN transceiver, the compare module having a receive data (RXD) interface configured to receive data from the CAN transceiver, a CAN decoder configured to decode an identifier of a CAN message received from the RXD interface, and an identifier memory configured to store an entry that corresponds to at least one identifier, and compare logic configured to compare a received identifier from a CAN message to the entry that is stored in the identifier memory and to output a match signal when the comparison indicates that the received identifier of the CAN message matches the entry that is stored at the CAN device. The CAN device also includes a signal generator configured to output, in response to the match signal, a signal to invalidate the CAN message.