Abstract: A method for securing the time synchronization of an Ethernet on-board network of a motor vehicle, by: determining a delay time of a first signal on a first connecting path between a first control unit of the network and a second control unit of the network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The determination of the delay time of a first signal, the determination of the maximum speed of the first connecting path, and the determination of the type of a transmission medium of the first connecting path result in an entropy source being formed that is used to ascertain at least one dynamic key for the connecting path to encrypt a time synchronization message for the connecting path.

Abstract: The invention relates to a method for determining the control unit temperature in a motor vehicle by means of Ethernet, comprising the steps of: determining a transit time of a first signal on a first connection path between a first server ECU of the Ethernet vehicle electrical system and a second server ECU of the Ethernet vehicle electrical system; determining a maximum speed of the first connection path on the basis of the transit time; identifying at least a first server ECU of the Ethernet vehicle electrical system; synchronising at least a first server ECU of the Ethernet vehicle electrical system; determining the synchronisation interval; determining a timestamp of the first server ECU; reading a timestamp or querying the clock time of the first server ECU; comparing the timestamp with a reference clock of the Ethernet vehicle electrical system; carrying out a transit time measurement; determining the speed of the associated clock generator; determining the time difference of the synchronisation interv

Abstract: A method for securing time synchronization in a server Electronic Control Unit (ECU), including: initializing time synchronization of the components; storing a unique clock identification of a grandmaster clock; identifying a shadow controller; transmitting synchronization messages; querying the sending time with the shadow controller; inserting the time in the follow-up message via the controller that forms the grandmaster clock, and retransmitting the time; sending additional messages relating to time synchronization via selected network devices that do not provide the previously determined grandmaster clock. The time information sent in the additional messages relating to time synchronization and the clock parameters relevant for determining the best clock by Best Master Clock Algorithm (BMCA) and the domain number match those of the previously determined grandmaster clock, or are comparable with them.

Abstract: In a system of control devices networked with one another via a first network or multiple first sub-networks, and of which at least one is a server-based control device that combines multiple functional units, a grandmaster clock is defined by ascertaining the best clock of the entire network. If the best clock is located in a server-based control device, the distances are ascertained between selected functional units that are suitable as a source of the grandmaster clock and selected active network interfaces that connect the server-based control device to the first network or multiple first sub-networks, and the average distance to all selected network interfaces for each of the selected functional units is determined. That selected functional unit that has the smallest average distance to all selected network interfaces is defined as grandmaster clock for the first network or the first sub-networks.

Abstract: The validity of sensor data of an Ethernet onboard network in a motor vehicle is checked by: determining a delay time of a first signal on a first connecting path between a first control unit of the Ethernet onboard network and a second control unit of the Ethernet onboard network; determining a maximum speed of the first connecting path on the basis of the delay time; and determining a type of a transmission medium of the first connecting path on the basis of the maximum speed. The following steps are also carried out: identifying at least a first control unit of the Ethernet onboard network, synchronizing at least a first control unit of the Ethernet onboard network, ascertaining the synchronization interval, ascertaining a drift of a timer of the first control unit, ascertaining a timestamp of the first control unit, reading a timestamp of the first control unit.

Abstract: A method for rapidly flashing sensor nodes via an Ethernet network having a head node and a plurality of associated nodes. The method includes: determining the number of active nodes by a head node; classifying the identified nodes into multiple classifications to prioritize the Ethernet network communication by the head node; receiving reservation requests from at least some of the plurality of nodes by the head node; assigning to one or more nodes in the upcoming communication window time slots in response to reservation requests based on a node priority and the priority assigned to the nodes in accordance with their classification. A necessary download data rate is then determined and, a current bus utilization is ascertained by calculating the time difference of a final beacon and the number of nodes, and the bus cycle of the Ethernet network is optimized in terms of the necessary download data rate.

Abstract: A method for dynamically configuring devices in an Ethernet network, including: a head node a) determining the number of active nodes, b) classifying the identified nodes into two or more classifications of nodes to prioritize the Ethernet network communication, and c) receiving reservation requests from at least some of the multiplicity of nodes, and d) allocating time slots, in response to reservation requests, to one or more nodes in the upcoming communication window, the allocations based on a node priority and the priority being allocated to the nodes in accordance with their classification. After the active nodes have been determined, the nodes are dynamically configured, and a timer of the respective node is selected and started, with each active node respectively assigning the smallest possible ID to itself. This leads to a bus access of the respective node and, if there is bus activity, the other network nodes behave passively.

Abstract: A first network node for a vehicle communicates with a second network node and identifies a data transfer rate symmetry by: transmitting a first message and storing a first timestamp indicating the transmission time of the first message, transmitting a second message directly after transmitting the first message and storing a second timestamp indicating the transmission time of the second message, receiving a third message and storing a seventh timestamp indicating the transmission time of the third message, receiving a fourth message, which was transmitted after the third message, and storing an eighth timestamp indicating the transmission time of the fourth message. The first computing unit is configured for identifying, a data transfer rate symmetry by means of the first timestamp, the second timestamp, the seventh timestamp, and the eighth timestamp.

Abstract: A network interface has an input port, which is designed to accept messages from a first device or first network, and an output port, which is designed to forward the messages to a second device or second network. A memory is provided for a timetable. The network interface is designed to forward messages arriving at the input port during open times defined by the timetable to the output port and to discard messages arriving at the input port during closed times defined by the timetable. A configuration unit is designed to accept and store in the memory a timetable defined by a monitoring unit as a shared secret for the network interface and at least one sender of messages, and/or to negotiate a timetable with at least one sender of messages as a shared secret.

Abstract: The time synchronization of a network is protected against unauthorized changes to the grandmaster clock of a base time domain by monitoring the physical communication interfaces of a network device for arrival of messages relating to time synchronization. If the messages relating to time synchronization apply to the initially set-up and synchronized base time domain, a check is performed to determine whether the messages relating to time synchronization announce a new grandmaster clock having better clock parameters than those of the present grandmaster clock. If so, a virtual base time domain is started by the network device. If the verification reveals that the proposed new grandmaster clock is trustworthy or valid, the network device discontinues the virtual time domain, updates its stored information concerning the grandmaster clock and, from this time onward, sends messages relating to time synchronization that are based on the new clock parameters to the network.

Abstract: A first network node for a vehicle communicates with a second network node and identifies a data transfer rate symmetry by: transmitting a first message and storing a first timestamp indicating the transmission time of the first message, transmitting a second message directly after transmitting the first message and storing a second timestamp indicating the transmission time of the second message, receiving a third message and storing a seventh timestamp indicating the transmission time of the third message, receiving a fourth message, which was transmitted after the third message, and storing an eighth timestamp indicating the transmission time of the fourth message. The first computing unit is configured for identifying, a data transfer rate symmetry by means of the first timestamp, the second timestamp, the seventh timestamp, and the eighth timestamp.

Abstract: A method for encrypting security-relevant data in the vehicle, wherein, if the communication subscriber is located outside of the ECU, a request is made to set up a secure connection from one communication subscriber to the other communication subscriber, wherein the security mechanism for setting up a secure connection is effected depending on the distance ascertained.

Abstract: A method for rapidly flashing sensor nodes via an Ethernet network having a head node and a plurality of associated nodes. The method includes: determining the number of active nodes by a head node; classifying the identified nodes into multiple classifications to prioritize the Ethernet network communication by the head node; receiving reservation requests from at least some of the plurality of nodes by the head node; assigning to one or more nodes in the upcoming communication window time slots in response to reservation requests based on a node priority and the priority assigned to the nodes in accordance with their classification. A necessary download data rate is then determined and, a current bus utilization is ascertained by calculating the time difference of a final beacon and the number of nodes, and the bus cycle of the Ethernet network is optimized in terms of the necessary download data rate.

Abstract: A control unit architecture and a method in which a communication connection takes place between at least two control units, in particular in a vehicle. The method includes receiving the data packet by the first interface controller; determining, by a data analyzer, a transmission strategy for the data packet, the transmission strategy including at least one of the following actions: rejecting the data packet, and/or sending the data packet to at least one of the second interface controllers, and/or sending the data packet to at least one of the buffer stores, and/or fragmenting the data packet and sending it to at least one of the buffer stores, and/or sending the content of the at least one buffer store to at least one of the second interface controllers; implementing the transmission strategy for the data packet.

Abstract: The method includes the following steps: a) a head node determining the number of active nodes; b) the head node classifying the identified nodes into two or more classifications of nodes in order to prioritize the Ethernet network communication; c) the head node receiving reservation requests from at least some of the multiplicity of nodes; d) allocating time slots, in response to reservation requests, to one or more nodes in the upcoming communication window, the allocations being based on a priority of the nodes and the priority being allocated to the nodes in accordance with their classification. After the number of active nodes has been determined, the bus cycle length is calculated and the number of sleeping or inactive or defective nodes is determined, and a beacon bus cycle is determined in terms of how much the bus cycle length is able to be shortened.

Abstract: A method for determining components of a sensor network within an Ethernet on-board network in a motor vehicle between at least two ECU nodes and at least one further ECU node. The at least one ECU node responds to a received payload with a payload only after a delay time, the delay time satisfying the condition tBUS?tB+(tP+tC) n, where tB denotes a beacon time of the ECU node, tC denotes the commit time of the further ECU node, tP denotes the maximum payload with the maximum length, and n denotes the number of ECU nodes.

Abstract: An apparatus for configuring and validating an intervention in a real-time Ethernet data network for a motor vehicle includes: a vehicle diagnostic device, a first data storage device, a first data checking device, a second data storage device, and a second data checking device.

Abstract: A method for operating an Ethernet on-board electrical system of a motor vehicle includes determining a propagation time or delay of a first signal on a first connection path between a first control unit of the Ethernet on-board electrical system and a second control unit of the Ethernet on-board electrical system. A maximum speed of the first connection path is determined. A type of transmission medium of the first connection path is determined on the basis of the connection delay and the maximum speed. A control unit for an Ethernet on-board electrical system and an Ethernet on-board electrical system for a motor vehicle are also provided.

Abstract: A method for detecting unauthorized eavesdropping. A first subscriber determines a transit time for the transmission of data to a second subscriber, adds the random value to the transit time to obtain a waiting time, waits for the waiting time, creates a data packet containing a time stamp and transmits this data packet to the second subscriber. The second subscriber records the time it receives the data packet and compares it with the time stamp contained in the data packet, determines that the data packet has arrived either: before the time indicated in the time stamp, more than a predefined tolerance time after the time indicated in the time stamp, or before or more than a predefined tolerance time after a time at which it can be expected in the second subscriber as an indication that communication between the first subscriber and the second subscriber is being eavesdropped on.

Abstract: In a system of control devices networked with one another via a first network or multiple first sub-networks, and of which at least one is a server-based control device that combines multiple functional units, a grandmaster clock is defined by ascertaining the best clock of the entire network. If the best clock is located in a server-based control device, the distances are ascertained between selected functional units that are suitable as a source of the grandmaster clock and selected active network interfaces that connect the server-based control device to the first network or multiple first sub-networks, and the average distance to all selected network interfaces for each of the selected functional units is determined. That selected functional unit that has the smallest average distance to all selected network interfaces is defined as grandmaster clock for the first network or the first sub-networks.