Valeo Comfort and Driving Assistance

The invention relates to a method (Mth) for integrity verification of Linux filesystem images (Fsl) of a Linux embedded system, wherein said method (Mth) comprises: (a) a cryptographic signing phase (Ph_S) comprising : - generating a unique signature (S<n>) for each Linux filesystem image (FsI<n>) of a filesystem (Fs); - appending it to each corresponding Linux filesystem images (FsI<n>); - adding a padding (Pa<n>) to align the appended unique signatures (S<n>) to a predetermined size or structure; - producing signed Linux filesystem images (FsIS<n>) by combining each Linux filesystem image (FsI<n>) with their respective unique signature (S<n>), and padding (Pa<n>); -(b) a building phase (Ph_Bd) comprising : - building an initRAMFs image (I_RAMFs) that comprises a security configuration file (fs<n>.conf) for each signed Linux filesystem images (FsIS<n>), a security configuration file (fs<n>.conf) comprising a public key (PBK) or certificate (CT) and a fixed offset of location (Off<n>) for their respective signatures (S<n>); - building a boot Image (I_Boot) that comprises said initRAMFs image (I_RAMFs) and a Linux kernel (K); - loading a secondary bootloader (SBL), an application bootloader (ABL), said boot-image (I_Boot), said initRAMFs image (I_RAMFs), said Linux filesystem images (FsIS<n>) and said Linux filesystem images (FsIS<n>) into a second memory (Mem1) of a target device (Dev) that comprises a primary bootloader (PBL); (c) a boot up phase (Ph_Bt) comprising : - executing said primary bootloader (PBL) so as to cryptographically verify the secondary bootloader (SBL); - executing said secondary bootloader (SBL) so as to cryptographically verify the application bootloader (ABL); - executing said application bootloader (ABL) so as to load the boot image (I_Boot) into a random access memory (RAM) of said target device (Dev), said boot image (I_Boot) comprising the initRAMFs image (I_RAMFs) and the Linux kernel (K); - starting the Linux kernel (K) so as to execute the initRAMFs image (I_RAMFs), said executing comprising : verifying sequentially each of said signed Linux filesystem images (FsIS<n>) and if the signature verification is successful, mounting the Linux filesystem images (FsI<n>) into said random access memory (RAM).

The disclosure relates to a method implemented by a TCU for managing load during V2X communications. The TCU comprises a data storage containing dynamic information representing a relation between unique identifiers and a respective filtering duration. The method comprises receiving messages from multiple remote emitters, identifying the unique identifier of the respective remote emitter, and forwarding received messages to one or more processes based on the identified unique identifier and on the dynamic information. For each message among at least one message received, the method comprises obtaining areas of interest, identifying a location of the respective remote emitter, identifying one or more respective areas of interest containing the identified location, and updating the dynamic information to enable an up-to-date of the forwarding frequency for the respective remote emitter, based on the identified one or more areas of interest. The method forms an improved solution for managing load during V2X communications.

The invention relates to a first method (Mth) for secure exchanging a first pre-shared key (PSK) between a first node (A) and a second node (B) for an IPSec communication, said first node (A) comprising a first secure zone (Z'_A) where a master key (MK) is stored and a first non-secure zone (Z'_A), and said second node (B) comprising a second secure zone (Z_B) where the master key (MK) is stored and a second non-secure zone (Z'_B), wherein said first method (Mth) comprises:- generating by said first node (A) a first nonce (N) at each boot session (Bt),- deriving by said first node (A) in the first unsecured zone (Z'_A) a first pre-shared key (PSK) based on said first nonce (N) and on said master key (MK)- encrypting by said first node (A) the first pre-shared key (PSK) with the master key (MK) to generate a first encrypted nonce (ENM),- transmitting by said first node (A) said first encrypted nonce (ENM) to the second node (B),- receiving by said second node (B) from said first node (A) said first encrypted nonce (ENM),- decrypting by said second node (B) said first encrypted nonce (ENM) with the master key (MK) to retrieve a second nonce (N'),- deriving by said second node (B) in the second unsecured zone (Z'_B) a second pre-shared key (PSK') based on said second nonce (N') and on the master key (MK) using said key derivation function (KDF),- encrypting by said second node (B) the second nonce (N') with said second pre-shared key (PSK') to generate a second encrypted nonce (ENS),- transmitting by said second node (B) said second encrypted nonce (ENS) to the first node (A),- receiving by said first node (A) said second encrypted nonce (ENS) from the second node (B),- decrypting by said first node (A) said second encrypted nonce (ENS) with the first pre-shared key (PSK) to retrieve a second nonce (N'),- comparing by said first node (A) the second nonce (N') with the first nonce (N),- upon the result of said comparison, sending by said first node (A) a result notification (R) to the second node (B),- receiving by said second node (B) from said first node (A) said result notification (R).

The disclosure notably relates to a method implemented by vehicles each equipped with a respective traffic system and optionally a respective start-stop system. The vehicles are stopped due to a blockage. The method comprises, by each vehicle, detecting S10 the blockage. The method comprises, by a determined first vehicle, determining S31 that the blockage is removed, and sending S32, to each other vehicle, a message indicating that the blockage is removed. The determined first vehicle may also optionally communicate the type of blockage to other vehicles. The method comprises, for each given vehicle receiving the message, performing at least one of warning S41 a driver of the given vehicle that the blockage is removed and, when equipped with a start-stop system, starting S42 the start-stop system of the given vehicle. Such a method improves vehicle departure once the blockage has been removed.

In a computer-implemented method for providing data regarding an environment of a vehicle (1) for use by an extended reality software application, a pre-computing module (5) receives environmental sensor data (10) representing the environment directly or indirectly from an environmental sensor system (7) of the vehicle (1) and, depending on the environmental sensor data (10), assigns at least one class of at least one set of predefined classes to a current scene in the environment. The pre-computing module (5) provides at least one data package to an application module (6) for running the extended reality software application depending on the at least one data package. The at least one data package comprises at least a part of the environmental sensor data (10) or modified environmental sensor data (10) depending on the environmental sensor data (10) and the at least one class assigned to the current scene.

The invention relates to a method, in particular a computer-implemented method, for assessing a driver intention of a driver (11) of a vehicle (1), comprising the following steps: a) providing vehicle parameter to a computing unit (5); b) providing parameter as to the vehicle driver (11) to the computing unit (5); c) assigning at least one first characterizing value (α) to at least one vehicle parameter; d) assigning at least one second characterizing value (α) to at least one vehicle driver parameter; e) assigning at least one first weighting factor (k) for at least one vehicle parameter, by which the first characterizing value (α) of the vehicle parameter is weighted; f) assigning at least one second weighting factor (k) for at least one vehicle driver parameter, by which the second characterizing value (α) of the vehicle driver parameter is weighted; g) assessing the driver intention by the computing unit (5) depending on the first and second characterizing values (α) and the first and second weighting factors (k).

The invention relates to a method for generating at least one control signal (3) for at least one functional device (4) of an at least in part automatically operated motor vehicle (1) by an assistance system (2) of the motor vehicle (1), comprising capturing surroundings (8) of the motor vehicle (1) by at least one first capturing device (5) of the assistance system (2); determining a current gaze (9) of a driver of the motor vehicle (1) by a second capturing device (6) of the assistance system (2); assigning the determined current gaze (9) to a current object (10) in the captured surroundings (8) by an electronic computing device (7) of the assistance system (2); analyzing the object (10) by the electronic computing device (7); providing a personalized action plan for an at least in part automated maneuver of the motor vehicle (1) depending on a user profile and the analyzed object (10); and generating the at least one control signal (3) for the at least one functional device (4) depending on the analyzed object (10) and the personalized action plan by the electronic computing device (7). Furthermore, the present invention relates to a computer program product, a computer-readable storage medium, as well as to an assistance system (2).

The disclosure relates to a method implemented by an electronic control unit in a vehicle controller area network. The ECU has a CAN controller and a CAN transceiver that is connected to a CAN bus. The method comprises, by the CAN controller, transmitting outgoing messages and/or receiving from the CAN transceiver incoming messages that have been transmitted to the CAN transceiver through the CAN bus. Each message contains an indication of a respective level of priority among a predetermined set of levels of priority. The method comprises, by the CAN transceiver, inserting messages in at least one priority queue of a buffer, based on the indication of the respective level of priority contained in the messages and emptying the buffer at a dynamically controlled rate, following the at least one priority queue. This forms an improved solution for managing overloads of the CAN bus and/or the CAN controller.

The invention relates to a head up display device comprising a housing (6), and, inside the housing, an picture generation unit (2) configured to generate a light beam (3), a folding mirror (9) attached to a first region (13) of an inner surface of the housing and configured to reflect the light beam, wherein the head-up display (1) comprises a spacer structure (16) extending above a second region (18) of an outer surface of the housing, the first region and the second region (19) forming two opposite side of a same portion of a wall of the housing, the spacer structure (16) being fixed to at least a portion of the housing.

The invention relates to a head up display device comprising a housing (6) and, inside the housing, a picture generation unit (2) configured to generate a light beam (3), and a folding mirror (9) attached to a first region (13) of an inner surface of the housing and configured to reflect the light beam, wherein an outer surface of the housing comprises a spacer structure (16) extending from a second region (18) of an outer surface of the housing, the first region and the second region forming two opposite sides of a same portion of a wall of the housing, the spacer structure being an integral part of the housing.