SECURED FLASH PROGRAMMING OF SECONDARY PROCESSOR
    1.
    发明申请
    SECURED FLASH PROGRAMMING OF SECONDARY PROCESSOR 有权
    二次处理器的安全闪存编程

    公开(公告)号:US20140032916A1

    公开(公告)日:2014-01-30

    申请号:US13560207

    申请日:2012-07-27

    IPC分类号: H04L9/32

    摘要: A system and method for securely flashing a controller, where the controller includes at least one main processor and at least one secondary processor, and where the processing duties are distributed between the processors. A programming tool provides a content file to be flashed and a digital signature to the controller. The controller calculates a hash value of the content file, decrypts the digital signature using a public key to generate a decrypted hash value, compares the decrypted hash value to the calculated hash value, and determines that the content file is valid if the decrypted hash code matches the calculated hash value, where one or more of the steps of calculating the hash value, decrypting the digital signature, comparing the decrypted hash value to the calculated hash value and determining that the content file is valid, is performed by the main processor for the secondary processor.

    摘要翻译: 一种用于安全地闪烁控制器的系统和方法,其中控制器包括至少一个主处理器和至少一个辅助处理器,并且其中处理任务分布在处理器之间。 编程工具提供要闪存的内容文件和控制器的数字签名。 控制器计算内容文件的哈希值,使用公共密钥对数字签名进行解密以生成解密的散列值,将解密的哈希值与所计算的散列值进行比较,并确定内容文件是否有效,如果解密的哈希码 匹配所计算的散列值,其中计算哈希值的一个或多个步骤,解密数字签名,将解密的散列值与所计算的哈希值进行比较并确定内容文件是有效的,由主处理器执行 二级处理器。

    Securing safety-critical variables
    2.
    发明授权
    Securing safety-critical variables 有权
    确保安全关键变量

    公开(公告)号:US08117412B2

    公开(公告)日:2012-02-14

    申请号:US12259587

    申请日:2008-10-28

    IPC分类号: G06F12/00 G06F13/00 G06F13/28

    CPC分类号: G06F13/28

    摘要: A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses.

    摘要翻译: 系统包括通用存储器,可锁定存储器,存储器管理单元和处理器。 通用存储器包括第一组地址的数据。 可锁定存储器包括第二组地址的数据。 存储器管理单元有选择地将数据写入通用存储器和可锁定存储器之一,并通过防止对可锁定存储器的写入来选择性地锁定可锁定存储器。 处理器在请求写入第二组地址之一之前指示存储器管理单元解锁可锁定存储器。

    SECURED THROTTLE POSITION IN A COORDINATED TORQUE CONTROL SYSTEM
    4.
    发明申请
    SECURED THROTTLE POSITION IN A COORDINATED TORQUE CONTROL SYSTEM 有权
    协调的扭矩控制系统中的安全节流位置

    公开(公告)号:US20090088946A1

    公开(公告)日:2009-04-02

    申请号:US11950704

    申请日:2007-12-05

    IPC分类号: F02D41/00

    CPC分类号: F02D11/105 F02D11/107

    摘要: A throttle control module comprises a primary throttle position module, a redundant throttle position module, and a remedial action module. The primary throttle position module transforms a primary throttle area signal indicating desired throttle area into a primary throttle position signal indicating a first desired throttle position of a throttle valve. The throttle valve is actuated based upon the primary throttle position signal. The redundant throttle position module transforms a redundant throttle area signal indicating desired throttle area into a redundant throttle position signal indicating a second desired throttle position of the throttle valve. The remedial action module selectively generates a remedial action signal based upon a comparison of the first and second desired throttle positions.

    摘要翻译: 节气门控制模块包括主节气门位置模块,冗余节气门位置模块和补救动作模块。 主节气门位置模块将表示所需节气门区域的主节气门区域信号变换为表示节气门的第一所需节气门位置的主节气门位置信号。 基于主节气门位置信号来致动节气门。 冗余节气门位置模块将指示所需节气门区域的冗余节气门区域信号变换为指示节气门的第二所需节气门位置的冗余节气门位置信号。 补救动作模块基于第一和第二预期节气门位置的比较选择性地产生补救动作信号。

    Validating control system software variables
    5.
    发明授权
    Validating control system software variables 有权
    验证控制系统软件变量

    公开(公告)号:US07366597B2

    公开(公告)日:2008-04-29

    申请号:US11187523

    申请日:2005-07-22

    IPC分类号: G01M17/00 G11C29/12

    CPC分类号: G06F11/0751 G06F11/0739

    摘要: A vehicle having a system for validating a variable signal for input to a processor-performed function. An input module receives the signal. A processor tests first and second storage locations of a memory. After testing, the processor stores the signal in the first and second storage locations to obtain first and second stored values. The processor compares the first and second stored values and tests the first stored value for any corruption associated with receipt of the signal by said input module. The processor inputs the first and second stored values to first and second paths for performing the function to obtain two function results, and compares the results.

    摘要翻译: 一种具有用于验证用于输入到处理器执行的功能的可变信号的系统的车辆。 输入模块接收信号。 处理器测试存储器的第一和第二存储位置。 在测试之后,处理器将信号存储在第一和第二存储位置中以获得第一和第二存储值。 所述处理器比较所述第一和第二存储值并测试所述输入模块与所述信号的接收相关联的任何损坏的第一存储值。 处理器将第一和第二存储值输入到第一和第二路径以执行功能以获得两个功能结果,并比较结果。

    Terminating or disallowing signals to increase a throttle opening
    6.
    发明授权
    Terminating or disallowing signals to increase a throttle opening 有权
    终止或禁止信号增加节气门开度

    公开(公告)号:US07278952B2

    公开(公告)日:2007-10-09

    申请号:US10953783

    申请日:2004-09-29

    IPC分类号: B60W10/04

    摘要: A throttle control system is presented. A throttle has a throttle actuator coupled to a throttle plate. A control module is coupled to the throttle actuator. The control module sends a first signal within a gear change time period to the throttle actuator to position the throttle plate for an increased throttle opening. The control module terminates the first signal after the gear change time period. The control module sends a second signal to the throttle actuator to position the throttle plate. The control module positions the throttle plate by the throttle actuator to attain a lower throttle opening limit. A downshift from a higher gear to a lower gear occurs.

    摘要翻译: 提出了一种油门控制系统。 节气门具有联接到节流板的节气门执行器。 控制模块联接到节气门执行器。 控制模块将变速时间段内的第一信号发送到节气门致动器,以将节流板定位以增加节气门开度。 控制模块在变速时间段之后终止第一个信号。 控制模块向节气门执行器发送第二信号以定位节流板。 控制模块通过节气门执行器定位节流板以获得较低的节气门开度极限。 发生从较高档位降档到低档档位。

    Method and apparatus for ensuring integrity of critical RAM variables
    7.
    发明授权
    Method and apparatus for ensuring integrity of critical RAM variables 有权
    确保关键RAM变量的完整性的方法和装置

    公开(公告)号:US07143314B2

    公开(公告)日:2006-11-28

    申请号:US10676528

    申请日:2003-10-01

    申请人: Mark H. Costin

    发明人: Mark H. Costin

    IPC分类号: G06F11/00

    摘要: Methods and apparatus are provided for ensuring the integrity of a software variable stored in memory. The method comprises the steps of verifying the integrity of the specific hardware to be used in calculating and storing software variables, calculating a software variable and a dual store software variable using the verified hardware, storing both software variables in verified memory, and comparing the two stored software variables to verify the integrity of the software used for calculating and storing the two software variables.

    摘要翻译: 提供了用于确保存储在存储器中的软件变量的完整性的方法和装置。 该方法包括以下步骤:验证用于计算和存储软件变量的特定硬件的完整性,使用经过验证的硬件计算软件变量和双存储软件变量,将两个软件变量存储在经过验证的存储器中,并比较两个 存储的软件变量来验证用于计算和存储两个软件变量的软件的完整性。

    PROCESSOR SAFETY TEST CONTROL SYSTEMS AND METHODS
    8.
    发明申请
    PROCESSOR SAFETY TEST CONTROL SYSTEMS AND METHODS 有权
    处理器安全测试控制系统和方法

    公开(公告)号:US20120310467A1

    公开(公告)日:2012-12-06

    申请号:US13150646

    申请日:2011-06-01

    IPC分类号: G01M17/00

    摘要: First, second, and third processor modules selectively execute a test having N test states while an ignition system of the vehicle is off. N is an integer greater than one. The N test states each include: the first processor module setting a first output to a first predetermined value for one of the N test states; the second processor module setting a second output to a second predetermined value for the one of the N test states; the third processor module setting a third output to a third predetermined value for the one of the N test states; a predetermined expectation for the one of the N test states; and at least one of the first, second, and third processor modules indicating a fault when a fourth output is different than the predetermined expectation. A control module sets the fourth output based on the first, second, and third outputs.

    摘要翻译: 当车辆的点火系统关闭时,第一,第二和第三处理器模块选择性地执行具有N个测试状态的测试。 N是大于1的整数。 N个测试状态各自包括:第一处理器模块将第一输出设置为N个测试状态之一的第一预定值; 所述第二处理器模块将所述N个测试状态之一的第二输出设置为第二预定值; 所述第三处理器模块将所述N个测试状态之一的第三输出设置为第三预定值; 对N个测试状态之一的预期期望; 并且当第四输出不同于预定期望时,第一,第二和第三处理器模块中的至少一个处理器模块指示故障。 控制模块基于第一,第二和第三输出来设置第四输出。