Specifications
S E C U R I T Y T A R G E T D T C O 1 3 8 1 , R e l e a s e 1 . 3 v
Designed by
Date
Department
Released by
Winfried Rogenz
Date
2007-11-14
Department
SV CV Div TCO LRH
Designation
Security Target DTCO 1381, Release 1.3
Document
40225345 SPE 000 AA
Version
Pages
12 / 52
Observe
Protection marks for restricting the use of documents and products
(DIN 34: 1998-01)
The copying, distribution and utilization of this document as well as the
communication of its contents to others without expressed authorization
is prohibited. Offenders will be held liable for the payment of damages.
All rights reserved in the event of the grant of a patent, utility model or
ornamental design registration.
Observe
Protection marks for restricting the use of documents and products
(DIN 34: 1998-01)
The calibration in calibration mode is also possible via K-line-diagnostic and CAN interface.
(21) time adjustment
The time adjustment function in the TOE allows the user to adjust the current time in amounts of 1 mi-
nute maximum at intervals of not less than 7 days. Only in calibration mode this function is without
limitation.
(22) Software upgrade
The software upgrade is only possible in the calibration mode of the TOE. The TOE application
transfers the control to the software upgrade modul (SWUM). The SWUM controls all resources of the
TOE and manages the whole cycle. After the software upgrade the SWUM gives back the control to
the TOE. application.
(23) Remote Download
It is possible to authenticate a company card via external interfaces (CAN-Diagnostic, K-Line-
Diagnostic over the front calibration-/downloading connector). This company card is inserted in a
personal computer connected with a dedicated application (with a card reader) in the company office.
A remote download is carried out according to the following procedure:
• Identification and Authentication of a company card over the above mentioned external
interfaces.
• Transfer of a download list (including all required download data blocks)
• Download of the data blocks of the download list in a specified period
5.1.3 Power saving mode of the TOE
A power saving mode is implemented as an additional, optional feature. It is only used by vehicle
manufacturers, which need this feature. In this case the TOE is programmed at the Vehicle Unit
manufacturer site to enable the power saving mode.
In the power saving mode the microcontroller changes its state between normal running and the so
called interruptible power down mode in which nearly the whole microcontroller is switched off and only
some interrupts remain enabled, to wake up the microcontroller.
By one of this interrupt-inputs the controller is cyclically waked up by a signal, generated by the real
time clock RTC. It then works out all of its normal functions and afterwards enters the power down
mode again.
When the TOE is in the power saving mode, the display is switched off.
The power saving mode is only entered, when specific conditions are fulfilled.
The power saving mode is ended and the display is switched on, if one of these specific conditions for
the entrance into this mode is no more fulfilled.
Some events make it necessary respectively useful to wake up the microcontroller directly by an inter-
rupt and not to wait for the cyclic interrupt of the RTC.
These interrupt sources are separate inputs of the controller. So the reason for the wake up can be
detected in the program.