Abstract: A system includes a memory and a processor in communication with the memory. The processor is programmed to receive a runtime measurement from a sensor regarding the physical attribute of at least the separate processor during runtime; compare the runtime measurement of the physical attribute to a fingerprint that includes a baseline measurement of a physical attribute of at least a separate processor during an evaluation period of the system, and in response to the measurement exceeding a threshold, executing a countermeasure operation against software ran by the separate processor.

Abstract: A device for processing data, including at least two data interfaces, a first data interface of the at least two data interfaces being designed to at least temporarily exchange first data with at least one first external unit according to a first communication protocol, in particular CAN and/or FlexRay and/or LIN and/or MOST and/or Ethernet, a second data interface of the at least two data interfaces being designed to at least temporarily exchange data with a second external unit and/or the first external unit according to a second communication protocol, which is different than the first communication protocol, the device including a security unit, which is designed to at least temporarily carry out at least one security function with regard to at least one of the at least two data interfaces.

Abstract: A computer-implemented method for managing a memory in a network to which a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network in the process. If the first message is to be stored, a second message is randomly selected from the messages stored in the memory, the randomly selected second message is deleted from the memory, and the first message is stored in the memory.

Abstract: A computer-implemented method for managing a memory in a network, to which, in particular, a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network, and it is randomly decided whether or not the first message is to be stored in the memory. Depending on the random decision, the first message is stored or is not stored in the memory.

Abstract: A battery terminal which implements an electronically controlled vehicle electrical system coupling-disconnecting functionality including an electronically controlled power distribution, the battery terminal including a number of switching elements, of which at least some are connected to one another in a star point shape, the star-point connection being provided to be connected to a positive pole of a voltage source.

Abstract: A device for processing data, including at least two data interfaces, a first data interface of the at least two data interfaces being designed to at least temporarily exchange first data with at least one first external unit according to a first communication protocol, in particular CAN and/or FlexRay and/or LIN and/or MOST and/or Ethernet, a second data interface of the at least two data interfaces being designed to at least temporarily exchange data with a second external unit and/or the first external unit according to a second communication protocol, which is different than the first communication protocol, the device including a security unit, which is designed to at least temporarily carry out at least one security function with regard to at least one of the at least two data interfaces.

Abstract: A system includes a memory and a processor in communication with the memory. The processor is programmed to receive a runtime measurement from a sensor regarding the physical attribute of at least the separate processor during runtime; compare the runtime measurement of the physical attribute to a fingerprint that includes a baseline measurement of a physical attribute of at least a separate processor during an evaluation period of the system, and in response to the measurement exceeding a threshold, executing a countermeasure operation against software ran by the separate processor.

Abstract: Disclosed is a method for generating a secret or key in a network having first and second subscribers and a transmission channel therebetween. The first and second subscribers generating first and second sequences of subscriber values to achieve synchronous transmission; and the first and second subscriber each generate a common secret, the first subscriber doing so based on information about the first sequence and a superposition of the second sequence onto the first sequence on the transmission channel, and the second subscriber doing so based on information about the second sequence and the superposition of the second sequence of subscriber values onto the first sequence of subscriber values. At certain intervals or in accordance with a detected sequence of superposed values, the first or second subscriber outputs at least one filler value onto the transmission channel such that an edge change or change in values occurs on the transmission channel.

Abstract: A battery terminal which implements an electronically controlled vehicle electrical system coupling-disconnecting functionality including an electronically controlled power distribution, the battery terminal including a number of switching elements, of which at least some are connected to one another in a star point shape, the star-point connection being provided to be connected to a positive pole of a voltage source.

Abstract: A method for averting a manipulation on a CAN bus using a first node connected to the bus by a CAN controller includes a secured transmit module of the first node monitoring the bus; the transmit module recognizing transmission processes of the CAN controller in a normal operation of the first node; the transmit module recognizing a message transmitted impermissibly on the bus in a manner deviating from the normal operation; and, in the event the transmit module recognizes the message, the transmit module initiating countermeasures provided against the manipulation.

Abstract: A computer-implemented method for managing a memory in a network, to which, in particular, a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network, and it is randomly decided whether or not the first message is to be stored in the memory. Depending on the random decision, the first message is stored or is not stored in the memory.

Abstract: A computer-implemented method for managing a memory in a network to which a unit for detecting or preventing undesirable network intrusions is assigned. A first message is received by a user of the network in the process. If the first message is to be stored, a second message is randomly selected from the messages stored in the memory, the randomly selected second message is deleted from the memory, and the first message is stored in the memory.

Abstract: A method for transmitting a message in a vehicle, in which the message is received according to a source protocol, a communication mechanism which is used by the message and corresponds to the source protocol is converted in such a way that the communication mechanism corresponds to a canonical protocol, the communication mechanism corresponding to the canonical protocol is converted in such a way that the communication mechanism corresponds to a predefined target protocol, and the message is transmitted according to the target protocol.

Abstract: The present invention relates to a communications system (1) with at least one node (101, 102, 110), a control instance (10) and a shared communications medium (11). The at least one node is designed to receive messages that are or were transmitted in a first transmission mode. This first transmission mode has a lower data transmission rate and/or transmission complexity than a second transmission mode. The control instance (10) determines a first of the nodes in order to transmit data thereto in the second transmission mode or in order to release the shared communications medium (11) for the first node to transmit data in the second transmission mode. The control instance communicates this to the first node by means of a message (501, 502, 503, 504). This message is transmitted in the first transmission mode.

Abstract: A method, a device, and a computer program for operating a data processing system, including at least two nodes that are connectable via a data line for transmitting messages. A message includes an identifier for arbitrating messages to be transmitted, the identifier containing—information concerning a priority via which a processing sequence of messages ready for transmission is determined, and the identifier—containing information concerning a network node, via which a sender of the message is unambiguously determined, and—containing information concerning a service, via which a service is determined.

Abstract: A gateway, operable in a hierarchical heterogeneous network, includes at least two interfaces of which at least one is connectable to a lower network level, and the communication protocols in the network provide a message for offering a service and a message for searching for a service, receipt of a message coming in from a lower network level in the gateway at an interface for offering a service, and/or an item of information identifying the offered service, is noted in the interface receiving this message or in a management unit assigned thereto, and receipt of a message from a lower network level in the gateway at an interface for searching for a service and/or an item of information identifying the sought service is noted in the interface or management unit, and if the messages relate to the same service, a message for the service availability is sent via the interface.

Abstract: The invention relates to a method for processing at least one data packet (78, 156) which comprises a first header (82, 158) and a payload (100, 160), wherein the first header (82, 158) is processed by a first mode and the payload (100, 160) is processed by a second mode, wherein a number of processing steps (172, 174) for carrying out the second mode is greater than a number of processing steps (168, 170) for carrying out the first mode, the two modes being performed separately from one another.

Abstract: A method for generating a secret in a network that has two or more users, which are connected in a data-transmitting manner via at least two transmission channel. For a network communication that is not used for a secret generation, the two users communicate via a first of the at least two transmission channels, and for at least a secret-relevant portion of a network communication that is used for of a secret generation, they communicate via another, second one of the at least two transmission channels.

Abstract: A method for averting a manipulation on a CAN bus using a first node connected to the bus by a CAN controller includes a secured transmit module of the first node monitoring the bus; the transmit module recognizing transmission processes of the CAN controller in a normal operation of the first node; the transmit module recognizing a message transmitted impermissibly on the bus in a manner deviating from the normal operation; and, in the event the transmit module recognizes the message, the transmit module initiating countermeasures provided against the manipulation.

Abstract: A method, a device, and a computer program for operating a data processing system, including at least two nodes that are connectable via a data line for transmitting messages. A message includes an identifier for arbitrating messages to be transmitted, the identifier containing—information concerning a priority via which a processing sequence of messages ready for transmission is determined, and the identifier—containing information concerning a network node, via which a sender of the message is unambiguously determined, and—containing information concerning a service, via which a service is determined.