Abstract: The time synchronization of a network is protected against unauthorized changes to the grandmaster clock of a base time domain by monitoring the physical communication interfaces of a network device for arrival of messages relating to time synchronization. If the messages relating to time synchronization apply to the initially set-up and synchronized base time domain, a check is performed to determine whether the messages relating to time synchronization announce a new grandmaster clock having better clock parameters than those of the present grandmaster clock. If so, a virtual base time domain is started by the network device. If the verification reveals that the proposed new grandmaster clock is trustworthy or valid, the network device discontinues the virtual time domain, updates its stored information concerning the grandmaster clock and, from this time onward, sends messages relating to time synchronization that are based on the new clock parameters to the network.

Abstract: A first network node for a vehicle communicates with a second network node and identifies a data transfer rate symmetry by: transmitting a first message and storing a first timestamp indicating the transmission time of the first message, transmitting a second message directly after transmitting the first message and storing a second timestamp indicating the transmission time of the second message, receiving a third message and storing a seventh timestamp indicating the transmission time of the third message, receiving a fourth message, which was transmitted after the third message, and storing an eighth timestamp indicating the transmission time of the fourth message. The first computing unit is configured for identifying, a data transfer rate symmetry by means of the first timestamp, the second timestamp, the seventh timestamp, and the eighth timestamp.

Abstract: A method for encrypting security-relevant data in the vehicle, wherein, if the communication subscriber is located outside of the ECU, a request is made to set up a secure connection from one communication subscriber to the other communication subscriber, wherein the security mechanism for setting up a secure connection is effected depending on the distance ascertained.

Abstract: A method for rapidly flashing sensor nodes via an Ethernet network having a head node and a plurality of associated nodes. The method includes: determining the number of active nodes by a head node; classifying the identified nodes into multiple classifications to prioritize the Ethernet network communication by the head node; receiving reservation requests from at least some of the plurality of nodes by the head node; assigning to one or more nodes in the upcoming communication window time slots in response to reservation requests based on a node priority and the priority assigned to the nodes in accordance with their classification. A necessary download data rate is then determined and, a current bus utilization is ascertained by calculating the time difference of a final beacon and the number of nodes, and the bus cycle of the Ethernet network is optimized in terms of the necessary download data rate.

Abstract: A control unit architecture and a method in which a communication connection takes place between at least two control units, in particular in a vehicle. The method includes receiving the data packet by the first interface controller; determining, by a data analyzer, a transmission strategy for the data packet, the transmission strategy including at least one of the following actions: rejecting the data packet, and/or sending the data packet to at least one of the second interface controllers, and/or sending the data packet to at least one of the buffer stores, and/or fragmenting the data packet and sending it to at least one of the buffer stores, and/or sending the content of the at least one buffer store to at least one of the second interface controllers; implementing the transmission strategy for the data packet.

Abstract: The method includes the following steps: a) a head node determining the number of active nodes; b) the head node classifying the identified nodes into two or more classifications of nodes in order to prioritize the Ethernet network communication; c) the head node receiving reservation requests from at least some of the multiplicity of nodes; d) allocating time slots, in response to reservation requests, to one or more nodes in the upcoming communication window, the allocations being based on a priority of the nodes and the priority being allocated to the nodes in accordance with their classification. After the number of active nodes has been determined, the bus cycle length is calculated and the number of sleeping or inactive or defective nodes is determined, and a beacon bus cycle is determined in terms of how much the bus cycle length is able to be shortened.

Abstract: A method for determining components of a sensor network within an Ethernet on-board network in a motor vehicle between at least two ECU nodes and at least one further ECU node. The at least one ECU node responds to a received payload with a payload only after a delay time, the delay time satisfying the condition tBUS?tB+(tP+tC) n, where tB denotes a beacon time of the ECU node, tC denotes the commit time of the further ECU node, tP denotes the maximum payload with the maximum length, and n denotes the number of ECU nodes.

Abstract: An apparatus for configuring and validating an intervention in a real-time Ethernet data network for a motor vehicle includes: a vehicle diagnostic device, a first data storage device, a first data checking device, a second data storage device, and a second data checking device.

Abstract: A method for operating an Ethernet on-board electrical system of a motor vehicle includes determining a propagation time or delay of a first signal on a first connection path between a first control unit of the Ethernet on-board electrical system and a second control unit of the Ethernet on-board electrical system. A maximum speed of the first connection path is determined. A type of transmission medium of the first connection path is determined on the basis of the connection delay and the maximum speed. A control unit for an Ethernet on-board electrical system and an Ethernet on-board electrical system for a motor vehicle are also provided.

Abstract: A method for detecting unauthorized eavesdropping. A first subscriber determines a transit time for the transmission of data to a second subscriber, adds the random value to the transit time to obtain a waiting time, waits for the waiting time, creates a data packet containing a time stamp and transmits this data packet to the second subscriber. The second subscriber records the time it receives the data packet and compares it with the time stamp contained in the data packet, determines that the data packet has arrived either: before the time indicated in the time stamp, more than a predefined tolerance time after the time indicated in the time stamp, or before or more than a predefined tolerance time after a time at which it can be expected in the second subscriber as an indication that communication between the first subscriber and the second subscriber is being eavesdropped on.

Abstract: In a system of control devices networked with one another via a first network or multiple first sub-networks, and of which at least one is a server-based control device that combines multiple functional units, a grandmaster clock is defined by ascertaining the best clock of the entire network. If the best clock is located in a server-based control device, the distances are ascertained between selected functional units that are suitable as a source of the grandmaster clock and selected active network interfaces that connect the server-based control device to the first network or multiple first sub-networks, and the average distance to all selected network interfaces for each of the selected functional units is determined. That selected functional unit that has the smallest average distance to all selected network interfaces is defined as grandmaster clock for the first network or the first sub-networks.

Abstract: A gateway for data communication in a vehicle includes: a first communication interface, configured to use a first communication protocol; and a second communication interface configured to use a second communication protocol. The gateway is configured to transmit data from the first to the second communication interface and to transmit data from the second communication interface to the first communication interface. The gateway further includes a media converter configured to convert quality of service information from the first to the second communication protocol and from the second to the first communication protocol.

Abstract: The validity of sensor data of an Ethernet onboard network in a motor vehicle is checked by: determining a delay time of a first signal on a first connecting path between a first control unit of the Ethernet onboard network and a second control unit of the Ethernet onboard network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The following steps are also carried out: identifying at least a first control unit of the Ethernet onboard network, synchronizing at least a first control unit of the Ethernet onboard network, ascertaining the synchronization interval, ascertaining a drift of a timer of the first control unit, ascertaining a timestamp of the first control unit, reading a timestamp of the first control unit.

Abstract: A method for securing time synchronization in a server ECU, including: initializing time synchronization of the components; storing a unique clock identification of a grandmaster clock; identifying a shadow controller; transmitting the synchronization messages; querying the sending time with the shadow controller; inserting the time in the follow-up message via the controller that forms the grandmaster clock, and retransmitting the time; sending additional messages relating to time synchronization via selected network devices that do not provide the previously determined grandmaster clock. The time information sent in the additional messages relating to time synchronization and also the clock parameters relevant for determining the best clock by means of BMCA and the domain number match those of the previously determined grandmaster clock, or are comparable with them.

Abstract: A method for securing the time synchronization of an Ethernet on-board network of a motor vehicle, by: determining a delay time of a first signal on a first connecting path between a first control unit of the network and a second control unit of the network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The determination of the delay time of a first signal, the determination of the maximum speed of the first connecting path, and the determination of the type of a transmission medium of the first connecting path result in an entropy source being formed that is used to ascertain at least one dynamic key for the connecting path to encrypt a time synchronization message for the connecting path.

Abstract: A method establishes an improved clock topology for a computation system, where the computation system is a network of nodes, and where multiple nodes are capable of being a grandmaster clock source. The method includes sequentially selecting each selectable node as an acting grandmaster node, the acting grandmaster node sending announce messages, each node with a determinative communication requirement extracting topology information from the announce messages. The above steps are repeated with another node until each selectable node has been an acting grandmaster. The method then includes selecting the clock source based on the best clock topology for the set of nodes with determinative communication requirements.

Abstract: The time synchronization of a network is protected against unauthorized changes to the grandmaster clock of a base time domain by monitoring the physical communication interfaces of a network device for arrival of messages relating to time synchronization. If the messages relating to time synchronization apply to the initially set-up and synchronized base time domain, a check is performed to determine whether the messages relating to time synchronization announce a new grandmaster clock having better clock parameters than those of the present grandmaster clock. If so, a virtual base time domain is started by the network device. If the verification reveals that the proposed new grandmaster clock is trustworthy or valid, the network device discontinues the virtual time domain, updates its stored information concerning the grandmaster clock and, from this time onward, sends messages relating to time synchronization that are based on the new clock parameters to the network.

Abstract: A node may determine the topology of a computation system. The computation system is a network of nodes and multiple nodes are capable of being a grandmaster clock source. The method includes starting a best clock selection process, announcing clock information, and if the node is not acting grand master then receiving messages announcing clock information from other nodes of the network. Topology information is extracted from the messages, and if the node is acting grandmaster then retiring from the position of grandmaster. The best clock selection process steps are repeated until no node of the network becomes acting grandmaster.

Abstract: A method identifies an incorrect time stamp of an Ethernet message. Initially, an Ethernet message is received which contains a time stamp from a control unit of a motor vehicle. A time difference is determined between a global time of the time stamp and a local time of a clock of the control unit. The time stamp of the Ethernet message is identified as incorrect. The global time of the time stamp is replaced by the local time of the clock of the control unit if the time stamp is identified as incorrect.

Abstract: A method for operating an Ethernet communication device having multiple external physical interfaces for a motor vehicle includes the following steps: detecting a special state on at least one of the interfaces, generating a control signal to adapt the interface in the special state if the special state is detected; and blocking a forwarding of a message packet arriving on the interface in the special state to a media access control unit of the Ethernet communication device on the basis of the control signal.