A secure star coupler in a communication network adopting a time-triggered protocol based on a time slot include: transceivers each of which is connected to one of branches and transmits and receives signals; a routing table holder that holds a predetermined rule indicating a correspondence between a time slot and a branch; and a router that routes a signal received from a first branch to another branch unless a no-transfer condition is satisfied. The no-transfer condition includes a condition that the predetermined rule is not followed by the first branch and a condition that routing of a signal received from a second branch different from the first branch has started in the time slot.

In particular embodiments, a computing system may receive, by a processor in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle. The system may receive, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle. The system may determine, by the processor, a state associated with an operation mode of the vehicle based on the received sensor data. The system may evaluate, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle. The system may, subsequent to determining that the instruction is invalid, based on the evaluation, prevent transmission of the instruction to the actuator of the vehicle.

A method for detecting and identifying modules of a bus system is provided. The bus system includes a control unit, a bus starting from the control unit, and a plurality of modules connected to the bus. The method includes providing a current sink associated with each of the one or more modules. The current sink includes a transistor. The method includes providing a hall sensor associated with each of the one or more modules. The hall sensor detects a current on a low-side data line of the bus. For each one of the one or more modules: when the hall sensor detects a current on the low-side data line, the method includes maintaining a closed position of the transistor; and when the hall sensor fails to detect a current on the low-side data line, the method includes opening the transistor such that current does not flow to the module.

The present invention includes a CP monitoring unit configured to monitor a CP voltage applied through a CP line from the controller of the slow charging cable when the slow charging cable is connected to an inlet, a mode switching request unit configured to request mode switching to the controller of the slow charging cable by converting the monitored CP voltage to a preset mode switching voltage; a communication switching unit configured to connect a LIN transceiver for LIN communication to the CP line when the controller of the slow charging cable is switched to a LIN communication mode for software update, and a control unit configured to control the LIN transceiver to transmit a pre-stored software update file to the controller of the slow charging cable, so that the controller's software can be updated without disassembling or damaging the controller of the slow charging cable.

A first device, for communications on a communications bus is programmed to: identify a configuration on a communications bus comprising one of (1) a second LIN device and no second custom device, (2) the second custom device and no LIN device, and (3) both the second LIN device and the second custom device and select an operating mode specified for communications with the identified bus configuration. A third device for communications on the communications bus is programmed to identify that a fourth device on the communications bus is one of (1) a calibration device programmed to control two-way communications with the third device, (2) a LIN master device programmed to control two-way communications with the third device and (3) a custom master device programmed to only receive messages from the third device; and select an operating mode specified for communication with the other device.

Generally speaking, embodiments of the present disclosure include a network security system that can comprise a hardware appliance installed in a vehicle and connected with the busses, networks, communication systems, and other components of the vehicle. This in-vehicle network security appliance can provide an access point to the networks of the vehicle, such as the Controller Area Networks (CANs), Local Interconnect Networks (LINs) and other networks, monitor inbound and outbound traffic on those networks, and provide a firewall between those networks and external networks or systems as well as between different networks and systems within the vehicle. In this way, the network security appliance can protect the vehicle networks from different sources of attack from outside and inside the vehicle via components that are less secure like the infotainment system or diagnostic port.

A method of controlling communication over a Local Interconnect Network (LIN) bus is provided. The method comprises a redundancy master node detecting whether or not a first master node responds to data transmitted over the LIN bus; wherein in case the first master node does not respond, the redundancy master node will act as master node on the LIN bus.

Systems, apparatuses, and methods to identify an electronic control unit transmitting a message on a communication bus, such as an in-vehicle network bus, are provided. ECUs transmit messages by manipulating voltage on conductive lines of the bus. Observation circuitry can observe voltage transitions associated with the transmission at a point on the in-vehicle network bus. A domain bitmap can be generated from the observed voltage transitions. ECUs can be identified and/or fingerprinted based on the domain bitmaps.

A system having a plurality of devices configured in a daisy chain network including a communication bus connecting the devices and adapted to exchange address-setting information. Each device includes an input pin adapted to receive via an input signal line different from the communication bus a signal comprising configuration information for configuring at least the device; a configuration handling unit adapted to detect a configuration mode and to configure the device according to the configuration information; an indicator adapted to indicate whether the configuration handling unit has finished configuring the device; an output pin adapted to forward the configuration information to the daisy chain network when the indicator indicates the configuration of the device is done; and a safety handling unit adapted to be operable in a safety handling mode when the indicator indicates the configuration of the device is done.

In one embodiment, a computing system of an autonomous vehicle may receive a first set of data packets on one or more networks. The computing system may analyze the data packets to determine, for each packet, one or more of an authenticity, a validity, or a correctness of the data packet. The computing system may perform a first action for the first set of data packets based on the analysis. The first action may include signaling a safety driver of the autonomous vehicle to take over manual control of the vehicle in response to the data packets failing to satisfy the one or more of the authenticity, the validity, or the correctness criteria.