-
公开(公告)号：US20230198807A1
公开(公告)日：2023-06-22
申请号：US18064436
申请日：2022-12-12
Applicant: NXP B.V.
Inventor： Rolf van de Burgt , Bernd Uwe Gerhard Elend , Thierry G. C. Walrant
IPC: H04L12/66
CPC classification number: H04L12/66 , H04L2012/40215
Abstract: An apparatus for use with a Controller Area Network (“CAN”) transceiver includes a first input for receiving transmit-data and; a second input for receiving receive-data. The transmit-data includes data generated by a CAN controller to cause a CAN transceiver to transmit signalling that represents the transmit-data on the CAN bus and the receive-data indicates signalling from the CAN bus. The apparatus is configured to detect, in the receive-data, one or more fields of a CAN frame. The apparatus is then configured to prevent the CAN transceiver from transmitting the signalling that represents the transmit-data at times corresponding to the detected one or more fields of the CAN frame, thereby preventing an error frame in the transmit-data from being transmitted.
-
公开(公告)号：US11477033B2
公开(公告)日：2022-10-18
申请号：US16782835
申请日：2020-02-05
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
Abstract: A communication system includes a network device including a plurality of communication ports and a plurality of communication nodes coupled with the network device through the plurality of communication ports. The communication system further includes a controller that is configured to generate a security key and to send a new configuration along with a message authentication code to the network device, wherein the controller is further configured to break the security key into parts and send the parts of the security key to at least some of the plurality of communication nodes such that each of the at least some of the plurality of communication node receiving one part of the parts of the security key. The network device is configured to retrieve the parts of the security key from the at least some of the plurality of communication nodes, to assemble the security key from the retrieved parts of the security key and using the assembled security key to authenticate the new configuration.
-
公开(公告)号：US20210243034A1
公开(公告)日：2021-08-05
申请号：US16782835
申请日：2020-02-05
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
Abstract: A communication system is disclosed. The communication system includes a network device including a plurality of communication ports and a plurality of communication nodes coupled with the network device through the plurality of communication ports. The communication system further includes a controller that is configured to generate a security key and to send a new configuration along with a message authentication code to the network device, wherein the controller is further configured to break the security key into parts and send the parts of the security key to at least some of the plurality of communication nodes such that each of the at least some of the plurality of communication node receiving one part of the parts of the security key. The network device is configured to retrieve the parts of the secret key from the at least some of the plurality of communication nodes, to assemble the secret key from the retrieved parts of the secret key and using the assembled secret key to authenticate the new configuration.
-
公开(公告)号：US10789364B2
公开(公告)日：2020-09-29
申请号：US15969307
申请日：2018-05-02
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
Abstract: A method for providing an authenticated update in a distributed network is provided. The distributed network has a plurality of nodes coupled to a serial bus. The method begins with transmitting a credential from an external device to a first node. The update data and an authentication code are provided to a processor of a second node from the external device. The processor of the second node provides the update data and the authentication code to the transceiver of the second node. The authenticated update is finalized by the processor of the second node. The authenticated update is closed by the transceiver of the first node. The credential of the authenticated update is provided to the transceiver of the second node. The transceiver of the second node verifies the update data using the credential and the authentication code. After being verified, the authenticated update data is stored.
-
公开(公告)号：US20200304337A1
公开(公告)日：2020-09-24
申请号：US16359232
申请日：2019-03-20
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
IPC: H04L12/40
Abstract: A vehicle network system is disclosed. The vehicle network system includes a first controller area network (CAN) bus including a first node and a first secure transceiver and a second CAN bus including a second node and a second secure transceiver, a gateway to enable transmission of a CAN message from the first node to the second node. The vehicle network system also includes an auxiliary communication link to transmit an auxiliary data derived from the CAN message from the first secure transceiver to the second secure transceiver.
-
Patent Agency Ranking
公开(公告)号：US10742409B2
公开(公告)日：2020-08-11
申请号：US15839783
申请日：2017-12-12
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
Abstract: A method and system of authenticating a node in a distributed network is provided. The distributed network comprises a plurality of nodes connected to a shared medium of the distributed network. Each of the plurality of nodes is provisioned with an identity certificate comprising a public key, a private key associated with the public key and an identification sequence. The identification sequence is unique to the system comprising the distributed network. A second node of the plurality of nodes generates a node authenticity related information for authenticating at a first node of the plurality of nodes. The node authenticity related information comprises a signature generated using the private key of the second node from a sequence, which comprises the identification sequence. The second node transmits the node authenticity related information together with the identity certificate provisioned at the second node to the first node.
-
公开(公告)号：US10719607B2
公开(公告)日：2020-07-21
申请号：US15924604
申请日：2018-03-19
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant
Abstract: A method for performing a secure boot of a data processing system, and the data processing system are provided. The method includes: processing a command issued from a processor of the data processing system, the command directed to a memory; determining that the command is a command that causes the memory to be modified; performing cryptographic verification of the memory; and incrementing a first counter in response to the determining that the command is a command that causes the memory to be modified. The data processing system includes a processor, a memory, and a counter. The memory is coupled to the processor, and the memory stores data used by a bootloader during a secure boot. The counter is incremented by a memory controller in response to a command being a type of command that modifies the data stored by the memory.
-
公开(公告)号：US20240097935A1
公开(公告)日：2024-03-21
申请号：US18461312
申请日：2023-09-05
Applicant: NXP B.V.
Inventor： Thierry G. C. Walrant , Georg Olma , Karthik Sivaramakrishnan
IPC: H04L12/40
CPC classification number: H04L12/40006 , H04L2012/40215
Abstract: The present disclosure relates to a Controller Area Network (CAN) system including: a CAN device and a monitoring device. The CAN device includes a transmit data (TXD) interface, a transmitter, a CAN BUS interface, and a control unit. The control unit reads out an identifier from a TXD message and compares the identifier with a reference tag. The CAN device generates a CAN BUS signal based on the TXD message at the CAN BUS interface. The control unit, if the comparison indicates that the identifier does not correspond to the reference tag, invalidates a representation of the TXD message by the CAN BUS signal and temporarily prevents another CAN BUS signal from being generated by the CAN device at the CAN BUS interface. The monitoring device receives an instruction message over a CAN BUS network and, in response, tests for reachability other CAN devices on the CAN BUS network.
-
公开(公告)号：US20230198800A1
公开(公告)日：2023-06-22
申请号：US18061858
申请日：2022-12-05
Applicant: NXP B.V.
Inventor： Bernd Uwe Gerhard Elend , Rolf van de Burgt , Thierry G. C. Walrant
IPC: H04L12/40
CPC classification number: H04L12/40013 , H04L12/40078 , H04L2012/40215
Abstract: An apparatus for a controller area network, CAN, node, the node comprising a CAN controller and a CAN transceiver that is configured to couple to a CAN bus, the apparatus comprising a CAN protocol decoder and circuitry, the apparatus configured to:
receive an RX-bitstream generated by the CAN transceiver for the CAN controller;
receive a TX-bitstream generated by the CAN controller for receipt by the CAN transceiver;
wherein the CAN protocol decoder is configured to receive a bitstream based on the TX-bitstream for decoding CAN frames therein for monitoring of the CAN controller; and wherein the circuitry is configured to:
detect an idle state;
based on the detection of the idle state, modify the bitstream received by the CAN protocol decoder such that it includes a Start-of-Frame bit further based on detection of a Start-of-frame bit in the RX-bitstream.-
公开(公告)号：US11522872B2
公开(公告)日：2022-12-06
申请号：US16905901
申请日：2020-06-18
Applicant: NXP B.V.
Inventor： Franciscus Johannes Klösters , Rolf van de Burgt , Thierry G. C. Walrant , Bernd Uwe Gerhard Elend
IPC: H04L9/40 , H04L12/40 , H04L12/417
Abstract: A transceiver for sending and receiving data from a controller area network (CAN) bus is disclosed. The transceiver includes a microcontroller port, a transmitter and a receiver. The transceiver is configured to receive a data frame from a microcontroller via the microcontroller port and to determine if the microcontroller is authorized to send the data frame or part of it based on a message identifier in the data frame and the outcome of the arbitration process. If the microcontroller is unauthorized to send the data, the transceiver is configured to invalidate the data frame and disconnect the microcontroller from the CAN bus for a predetermined period.
-
-
-
-
-
-
-
-
-
Search Results
30
records
(took 0.015 seconds)
