Abstract: A method for detecting an interruption in a data transmission from a vehicle to a security-related function of a vehicle-external server includes receiving a data transmission of one or more control units of the vehicle using the security-related function of the vehicle-external server, and receiving a reference control unit state of the vehicle using the vehicle-external server. The method also includes determining an actual control unit state of the vehicle depending on the received data transmission, and checking for a deviation of the actual control unit state of the vehicle from the reference control unit state of the vehicle. The method further includes detecting an interruption in the data transmission of one or more control units of the vehicle to the security-related function of the vehicle-external server responsive to a determination that the deviation of the actual control unit state from the reference control unit state is present.

Abstract: A method for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device includes receiving a first message of a first control device via a first bus system using the second control device, and determining a bus system that is associated with the received first message. If the determined bus system differs from the first bus system, then the received first message is determined to be an inadmissible message of the first bus system by means of the second control device. The method also includes identifying the first control device as the manipulated control device using the second control device if the received first message has been identified as an inadmissible message. The method further includes providing an alarm message to a vehicle-external server using the second control device if the received first message is an inadmissible message.

Abstract: A method identifies a manipulation of a message of a bus system using a control device of a vehicle. Th method includes receiving a first message from a first control device using the control device of the vehicle. The method also includes receiving a second message from a second control device using the control device of the vehicle, and determining a system status of the vehicle based at least in part on the second message from the second control device. The method further checking a plausibility of a content of the first message using the determined system status of the vehicle using the control device of the vehicle in order to identify the manipulation of the first message. An alarm message is provided if the content of the first message is not plausible.

Abstract: A method identifies a manipulation of an analog signal by means of a control device of a vehicle. A series of messages are received from a bus system using the control device of the vehicle, wherein a message of the sequence of messages includes a value of the analog signal. The method includes storing the sequence of messages in a buffer of the control device, and determining a temporal profile of the analog signal based on the stored sequence of messages. The method further includes calculating a gradient for the determined temporal profile of the analog signal, and plausibility-checking the calculated gradient to identify the manipulation of the analog signal. The method also includes providing an alarm message if the gradient is not plausible.

Abstract: A method of using a controller of a vehicle to detect manipulation of a message of a bus system of the vehicle is disclosed herein. The method includes receiving, at the controller, the message from the bus system of the vehicle, and ascertaining a state of a learning method of the controller based on a vehicle state. When the state of the learning method indicates that the learning method is not trained: the method further includes training the learning method using the received message. When the state of the learning method indicates that the learning method is trained, the method further includes using the trained learning method to detect manipulation of the message. The method also includes providing an alarm message from the controller to a server outside of the vehicle when the trained learning method has detected manipulation of the message.

Abstract: A method for identifying a manipulated controller of a bus system of a vehicle is disclosed herein. The method includes transmitting a first message via the bus system by means of a first controller, and receiving the first message via the bus system by means of a second controller. The method further includes determining a message type of the received first message and determining a reference message by means of the second controller, wherein the reference message has a message type that corresponds to the determined message type of the first message. The method also includes determining a deviation of the first message from the reference message. When the first message deviates from the reference message, the method further includes identifying the first controller as the manipulated controller by means of the second controller, and providing an alarm message from the second controller to a server outside the vehicle.