Patents by Inventor Mark H. Costin
Mark H. Costin has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 9207661Abstract: A control system for a control module of a vehicle includes a first integrated circuit (IC) core of a primary processor that generates a first control signal using a central processing unit (CPU). A second IC core of the primary processor generates a second control signal using a second CPU and generates a remedial control signal based on the first control signal and the second control signal.Type: GrantFiled: July 20, 2007Date of Patent: December 8, 2015Assignee: GM GLOBAL TECHNOLOGY OPERATIONS LLCInventors: Mark H. Costin, Paul A. Bauerle
-
Patent number: 9122662Abstract: First, second, and third processor modules selectively execute a test having N test states while an ignition system of the vehicle is off. N is an integer greater than one. The N test states each include: the first processor module setting a first output to a first predetermined value for one of the N test states; the second processor module setting a second output to a second predetermined value for the one of the N test states; the third processor module setting a third output to a third predetermined value for the one of the N test states; a predetermined expectation for the one of the N test states; and at least one of the first, second, and third processor modules indicating a fault when a fourth output is different than the predetermined expectation. A control module sets the fourth output based on the first, second, and third outputs.Type: GrantFiled: June 1, 2011Date of Patent: September 1, 2015Inventors: James Mason Faucett, Mark H. Costin, David Dean Tarby, Aubrey Walter Downs, Jr.
-
Patent number: 9058419Abstract: A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.Type: GrantFiled: May 1, 2012Date of Patent: June 16, 2015Assignee: GM Global Technology Operations LLCInventors: Mark H. Costin, Ming Zhao, Paul A. Bauerle, Mahesh Balike, James T. Kurnik
-
Patent number: 9021246Abstract: A system and method for writing a new or replacement public key to a bootloader stored in a memory segment in the memory of a vehicle ECU without having to rewrite the entire bootloader. The method includes defining a key table in the bootloader memory segment includes a number of vacant memory slots that are available to store replacement public keys if they are needed. The key table is a separate section of the bootloader memory segment so that the key table memory slots are not used by the bootloader code.Type: GrantFiled: July 24, 2012Date of Patent: April 28, 2015Assignee: GM Global Technology Operations LLCInventors: Kevin M. Baltes, Thomas M. Forest, Mark H. Costin, Ansaf I. Alrabady
-
Patent number: 8925083Abstract: Preventing spoofing in an automotive network includes monitoring, by electronic control unit, data packets on a bus in the automotive network. Upon determining, in response to the monitoring, that a data packet is from a source other than the electronic control unit, the preventing spoofing in the automotive network includes generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the data packet.Type: GrantFiled: October 4, 2012Date of Patent: December 30, 2014Assignee: GM Global Technology Operations LLCInventors: Rod Niner, Mark H. Costin
-
Patent number: 8856538Abstract: A system and method for securely flashing a controller, where the controller includes at least one main processor and at least one secondary processor, and where the processing duties are distributed between the processors. A programming tool provides a content file to be flashed and a digital signature to the controller. The controller calculates a hash value of the content file, decrypts the digital signature using a public key to generate a decrypted hash value, compares the decrypted hash value to the calculated hash value, and determines that the content file is valid if the decrypted hash code matches the calculated hash value, where one or more of the steps of calculating the hash value, decrypting the digital signature, comparing the decrypted hash value to the calculated hash value and determining that the content file is valid, is performed by the main processor for the secondary processor.Type: GrantFiled: July 27, 2012Date of Patent: October 7, 2014Assignee: GM Global Technology Operations LLCInventors: Mark H. Costin, Ansaf I. Alrabady, Kevin M. Baltes
-
Publication number: 20140032916Abstract: A system and method for securely flashing a controller, where the controller includes at least one main processor and at least one secondary processor, and where the processing duties are distributed between the processors. A programming tool provides a content file to be flashed and a digital signature to the controller. The controller calculates a hash value of the content file, decrypts the digital signature using a public key to generate a decrypted hash value, compares the decrypted hash value to the calculated hash value, and determines that the content file is valid if the decrypted hash code matches the calculated hash value, where one or more of the steps of calculating the hash value, decrypting the digital signature, comparing the decrypted hash value to the calculated hash value and determining that the content file is valid, is performed by the main processor for the secondary processor.Type: ApplicationFiled: July 27, 2012Publication date: January 30, 2014Applicant: GM GLOBAL TECHNOLOGY OPERATIONS LLCInventors: Mark H. Costin, Ansaf I. Alrabady, Kevin M. Baltes
-
Publication number: 20130246866Abstract: A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.Type: ApplicationFiled: May 1, 2012Publication date: September 19, 2013Applicant: GM Global Technology Operations LLCInventors: Mark H. Costin, Ming Zhao, Paul A. Bauerle, Mahesh Balike, James T. Kurnik
-
Publication number: 20130111203Abstract: A system and method for writing a new or replacement public key to a bootloader stored in a memory segment in the memory of a vehicle ECU without having to rewrite the entire bootloader. The method includes defining a key table in the bootloader memory segment includes a number of vacant memory slots that are available to store replacement public keys if they are needed. The key table is a separate section of the bootloader memory segment so that the key table memory slots are not used by the bootloader code.Type: ApplicationFiled: July 24, 2012Publication date: May 2, 2013Applicant: GM GLOBAL TECHNOLOGY OPERATIONS LLCInventors: KEVIN M. BALTES, THOMAS M. FOREST, MARK H. COSTIN, ANSAF I. ALRABADY
-
Publication number: 20130111212Abstract: A method for providing digital signatures for authenticating the source and content of binary files which are flash programmed into automotive embedded controllers. A piece of electronic content is digitally signed on a signing server by creating a hash value and encrypting it using the signer's private key. The content file and digital signature files are then delivered using one of several alternative approaches to a programming tool, which in turn loads the content and signature files onto the controller on which the content will execute. The controller verifies the content by decrypting the signature file to restore the hash value, and comparing the decrypted hash value to a hash value calculated from the content itself. Multiple signature files for a piece of content are supported.Type: ApplicationFiled: July 24, 2012Publication date: May 2, 2013Applicant: GM GLOBAL TECHNOLOGY OPERATIONS LLCInventors: Kevin M. Baltes, Mark H. Costin, Thomas M. Forest, Ansaf I. Alrabady
-
Publication number: 20120310467Abstract: First, second, and third processor modules selectively execute a test having N test states while an ignition system of the vehicle is off. N is an integer greater than one. The N test states each include: the first processor module setting a first output to a first predetermined value for one of the N test states; the second processor module setting a second output to a second predetermined value for the one of the N test states; the third processor module setting a third output to a third predetermined value for the one of the N test states; a predetermined expectation for the one of the N test states; and at least one of the first, second, and third processor modules indicating a fault when a fourth output is different than the predetermined expectation. A control module sets the fourth output based on the first, second, and third outputs.Type: ApplicationFiled: June 1, 2011Publication date: December 6, 2012Applicant: GM Global Technology Operations LLCInventors: James Mason Faucett, Mark H. Costin, David Dean Tarby, Aubrey Walter Downs, JR.
-
Patent number: 8234049Abstract: A control module includes a predicted torque control module that determines a desired throttle area based on a transmission torque request and a desired predicted torque. A throttle security module determines a throttle limit based on the desired throttle area and the desired predicted torque and determines an adjusted desired throttle area based on the throttle limit. A throttle actuator module adjusts a throttle based on the adjusted desired throttle area.Type: GrantFiled: January 30, 2009Date of Patent: July 31, 2012Inventors: Joseph M. Stempnik, Richard B. Jess, Bahram Younessi, Mark H. Costin, Michael L. Kociba, Paul A. Bauerle, Bryan D. Lehman, William R. Mayhew, Andrew W. Baur
-
Patent number: 8181627Abstract: An engine system includes a throttle actuator module and a torque control module. The throttle actuator module controls a throttle actuator based on a desired throttle area. The torque control module determines an actuator torque. The torque control module determines a rate limited torque, a maximum torque, and a minimum torque based on the actuator torque and a predetermined rate of change. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is greater than the maximum torque. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is less than the minimum torque.Type: GrantFiled: February 9, 2009Date of Patent: May 22, 2012Inventors: Kevin T. Sharples, Mark H. Costin, Timothy J. Hartrey, Christopher E. Whitney, Bahram Younessi, Weixin Yan, Jeffrey M. Kaiser, Richard B. Jess, Joseph M. Stempnik, John A. Jacobs, Jinchun Peng, Leonard G. Wozniak, Vivek Mehta, Bruce A. Rogers
-
Patent number: 8170759Abstract: An engine control system of a vehicle comprises a torque module and a chassis request evaluation module. The torque module controls a torque output of an engine based on a driver torque request and selectively increases the torque output based on a chassis torque request. The chassis request evaluation module selectively prevents the increase of the torque output based on at least one of a vehicle speed, a transmission state, and an accelerator pedal position.Type: GrantFiled: January 22, 2009Date of Patent: May 1, 2012Inventors: Richard B. Jess, Mark T. Hutchinson, Joseph M. Stempnik, Michael L. Kociba, Mark H. Costin, Paul A. Bauerle, Michael J. Pitsch
-
Patent number: 8160796Abstract: An engine control system comprises a driver axle torque request module (DATRM) and a driver axle torque security module (DATSM). The DATRM determines a pedal torque request based on minimum and maximum scaling torques and a torque scalar. The DATRM determines a raw driver torque request. The DATRM selectively shapes raw driver torque request into a final driver torque request. The DATRM converts the final driver torque request into a first axle torque request. The DATSM selectively diagnoses a fault in the first axle torque request based on a minimum engine torque, the minimum scaling torque, a first comparison of the final driver torque request and the redundant final driver torque request, and a second comparison of the first axle torque request and a redundant axle torque request.Type: GrantFiled: September 23, 2009Date of Patent: April 17, 2012Inventors: Joseph M. Stempnik, Ronald W. Van Diepen, Jinchun Peng, Mark H. Costin, Bryan D Lehman, Xuehan Kong, Jonathan Packard
-
Patent number: 8117412Abstract: A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses.Type: GrantFiled: October 28, 2008Date of Patent: February 14, 2012Inventors: Mark H. Costin, Mingguang Yu, James T. Kurnik, Trenton W. Haines, Paul A. Bauerle
-
Patent number: 8050841Abstract: An air-per-cylinder (APC) security system for a vehicle comprises an APC determination module, an APC threshold determination module, and an APC diagnostic module. The APC determination module determines first and second APC values for first and second cylinders of an engine, respectively, based on mass airflow (MAF) into the engine. The APC threshold determination module determines an APC threshold based on the first APC value and a spark timing for the first cylinder. The APC diagnostic module selectively diagnoses a fault in the APC determination module when the second APC value is greater than a sum of the first APC value and the APC threshold.Type: GrantFiled: October 21, 2008Date of Patent: November 1, 2011Inventors: Mark H. Costin, Timothy J. Hartrey, Layne K. Wiggins, Bryan D. Lehman, Roberto De Paula, Joseph M. Stempnik
-
Patent number: 8041478Abstract: A vehicle speed module includes a speed arbitration module that receives at least two of a wheel speed, a transmission output speed (TOS), and an electric motor speed (EMS), and that determines a vehicle speed based on a comparison of the at least two of the wheel speed, the TOS, and the EMS. A speed diagnostic module selectively diagnoses a fault in one of a wheel speed sensor, a TOS sensor, and an EMS sensor based on the comparison.Type: GrantFiled: January 30, 2009Date of Patent: October 18, 2011Inventors: Joseph M. Stempnik, Richard B. Jess, Daniel P. Grenn, Tracey A. Bagley-Reed, Ronald W. Van Diepen, Mark H. Costin, Michael A. Turley, Sandra J. Nelson, Bryan D. Lehman
-
Patent number: 8010275Abstract: A throttle control module comprises a primary throttle position module, a redundant throttle position module, and a remedial action module. The primary throttle position module transforms a primary throttle area signal indicating desired throttle area into a primary throttle position signal indicating a first desired throttle position of a throttle valve. The throttle valve is actuated based upon the primary throttle position signal. The redundant throttle position module transforms a redundant throttle area signal indicating desired throttle area into a redundant throttle position signal indicating a second desired throttle position of the throttle valve. The remedial action module selectively generates a remedial action signal based upon a comparison of the first and second desired throttle positions.Type: GrantFiled: December 5, 2007Date of Patent: August 30, 2011Inventors: Paul A. Bauerle, Mark H. Costin
-
Patent number: 8000855Abstract: A diagnostic system includes N dedicated diagnostic modules that each correspond with a respective one of multiple control systems. The N dedicated diagnostic modules each generate status signals indicating results of respective diagnostic tests. A diagnostic error time monitor determines an accumulated error time value between error events for each of the control systems based on the status signals. The diagnostic error time monitor selectively reports a fault to a respective one of the N dedicated diagnostic modules based on the accumulated error time value.Type: GrantFiled: September 4, 2008Date of Patent: August 16, 2011Inventors: Paul A. Bauerle, Joseph M. Stempnik, Mingguang Yu, Mark H. Costin