Need based controller area network bus authentication

Patent metadata

Field	Value
Publication number	US-10243941-B2
Application number	US-201615340323-A
Country	US
Kind code	B2
Filing date	Nov 1, 2016
Priority date	Nov 1, 2016
Publication date	Mar 26, 2019
Grant date	Mar 26, 2019

Abstract

Systems and methods are provided and include a control module that receives a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus. The control module determines whether the communication packet from the communication node indicates that the vehicle sensor or the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating range. The control module sends an authentication message to the communication node in response to the communication packet indicating that the vehicle sensor or vehicle system is operating outside of the predetermined acceptable operating range. The control module determines whether a valid authentication code is received from the communication node and performs a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

First claim

What is claimed is:

1. A system comprising:
a control module configured to:
receive a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus;
determine whether the communication packet from the communication node indicates that the at least one of the vehicle sensor and the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating parameters of the sensor;
send an authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor;
determine whether a valid authentication code is received from the communication node in response to the authentication message; and
perform a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

2. The system of claim 1 wherein the remedial action includes ending communication between the control module and the communication node.

3. The system of claim 1 wherein the remedial action includes generating a notification for a potential attack warning.

4. The system of claim 1 wherein the control module triggers an out of range warning in response to the valid authentication code being received from the communication node and to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor.

5. The system of claim 1 wherein the control module includes a lookup table of the predetermined acceptable operating parameters of the sensors for each of the at least one of the vehicle sensor and the vehicle system.

6. The system of claim 1 wherein the control module sends an initial authentication message to the communication node in response to a vehicle associated with the communication node being powered on.

7. The system of claim 1 wherein the control module sends the authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor by a threshold value.

8. The system of claim 1 wherein the control module maintains a count of occurrences for the communication node, wherein the count of occurrences is incremented each time the at least one of the vehicle sensor and the vehicle system exceeds the predetermined acceptable operating parameters of the sensor by a threshold value.

9. The system of claim 8 wherein the control module sends the authentication message to the communication node in response to the count of occurrences for the at least one of the vehicle sensor and the vehicle system exceeding a threshold count.

10. The system of claim 8 wherein the control module selectively performs the remedial action in response to the count of occurrences exceeding a threshold count.

11. A method comprising:
receiving, with a control module, a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus;
determining, with the control module, whether the communication packet from the communication node indicates that the at least one of the vehicle sensor and the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating parameters of the sensor;
sending, with the control module, an authentication message to the communication node via the controller area network bus in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor;
determining, with the control module, whether a valid authentication code is received from the communication node in response to the authentication message; and
performing, with the control module, a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

12. The method of claim 11 wherein the remedial action includes ending communication between the control module and the communication node.

13. The method of claim 11 wherein the remedial action includes generating a notification for a potential attack warning.

14. The method of claim 11 further comprising triggering, with the control module, an out of range warning in response to the valid authentication code being received from the communication node and to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor.

15. The method of claim 11 wherein the control module includes a lookup table of the predetermined acceptable operating parameters of the sensors for each of the at least one of the vehicle sensor and the vehicle system.

16. The method of claim 11 further comprising sending, with the control module, an initial authentication message to the communication node in response to a vehicle associated with the communication node being powered on.

17. The method of claim 11 further comprising sending, with the control module, the authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor by a threshold value.

18. The method of claim 11 further comprising maintaining, with the control module, a count of occurrences for the communication node, wherein the count of occurrences is incremented each time the at least one of the vehicle sensor and the vehicle system exceeds the predetermined acceptable operating parameters of the sensor by a threshold value.

19. The method of claim 18 further comprising sending, with the control module, the authentication message to the communication node in response to the count of occurrences for the at least one of the vehicle sensor and the vehicle system exceeding a threshold count.

20. The method of claim 18 further comprising performing, with the control module, the remedial action in response to the count of occurrences exceeding a threshold count.

Assignees

• Denso Int America Inc

Inventors

• Bima Michael

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L12/40006

  Architecture of a communication node (current supply arrangements H04L12/10; intermediate storage or scheduling H04L49/90) · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title