Systems and methods for security breach detection in vehicle communication systems

Patent metadata

Field	Value
Publication number	US-10516683-B2
Application number	US-201715433916-A
Country	US
Kind code	B2
Filing date	Feb 15, 2017
Priority date	Feb 15, 2017
Publication date	Dec 24, 2019
Grant date	Dec 24, 2019

Abstract

Systems and methods for detection of security breaches in intravehicular communication systems are disclosed. In some embodiments, this may include intravehicular communication using messages sent with a checksum and a dynamic mathematical operator field. Errors in the checksum may be interpreted as ordinary transmission errors, whereas errors in the dynamic mathematical operator field may be interpreted as potential threats. Repeated errors in the dynamic mathematical operator, and/or unexpected messages in the intravehicular communications, may be interpreted as confirmed hacking. Upon confirmation of hacking, a warning may be issued to an operator and a vehicle safe mode may be entered, including restricting vehicle functionality.

First claim

The invention claimed is:

1. A method for an Intra-vehicle communications network, comprising,
receiving a network frame including a message from an electronic control unit, a first parameter and a second parameter concatenated together, wherein the second parameter comprises output of a dynamic mathematical operator;
evaluating the first parameter based on a first mathematical operation on the message and evaluating the second parameter based on a second mathematical operation on the message, wherein the second mathematical operation is a function based on one or more additional parameters stored locally in non-transitory memory of a vehicle controller;
indicating a network transmission error in response to an error in the first parameter including requesting retransmission of the message;
indicating a digital security breach in response to an error in the second parameter including issuing a visual and auditory warning to an operator; and
issuing a warning to an operator and adjusting a vehicle operating parameter in response to the digital security breach, the vehicle operating parameter being an engine operating parameter.

2. The method of claim 1 , wherein the first mathematical operation is a cyclic redundancy check, and wherein the second mathematical operation is a function based on one or more additional parameters stored locally in non-transitory memory of a vehicle controller.

3. The method of claim 1 , wherein the method further comprises entering a safe mode responsive to the indicated digital security breach and further responsive to an operator confirmation.

4. The method of claim 3 , wherein entering the safe mode includes one or more of restricting vehicle speed, restricting vehicle torque, and deactivating autonomous driving features.

5. The method of claim 4 , wherein entering the safe mode includes automatically stopping and shutting down a vehicle.

6. The method of claim 5 , wherein entering the safe mode includes automatically deactivating non-essential vehicle systems, including a multimedia system and an HVAC system.

7. The method of claim 6 , wherein entering the safe mode includes automatically deactivating wireless communication systems.

8. A system for a vehicle, comprising
a controller area network (CAN) bus;
an electronic control unit (ECU) connected to the CAN bus, an actuator, and a sensor;
a processor connected to the CAN bus, and including computer-readable instructions stored in non-transitory memory for:
receiving a network frame including a message from the ECU, the network frame including first and second fields, wherein the second field is generated by a dynamic mathematical operator based on bits of the message;
in response to an error in the first field, requesting retransmission of the message;
in response to an error in the second field, indicating a digital security breach and requesting retransmission of the message and incrementing an error counter; and
in response to the error counter exceeding a threshold, issuing a warning to an operator and adjusting an operating parameter of the vehicle, wherein the first field is computed based on a cyclic redundancy check, and wherein the second field is computed by a function based on the message and one or more function parameters retrieved from a table stored locally in the non-transitory memory, wherein the operating parameter is an engine operating parameter.

9. The system of claim 8 , wherein, in response to the error in the second field, advancing a key, the key indicating corresponding function parameters in the table.

10. The system of claim 9 , wherein, in response to the message being retransmitted, computing the second field based on the function parameters corresponding to the advanced key.

Assignees

• Ford Global Tech Llc

Inventors

• Conner Dana
• Ghannam Mahmoud Yousef
• Lee Darren

Classifications

• B60W2540/215

  Selection or confirmation of options · CPC title

• H04W4/48

  for in-vehicle communication · CPC title

• H04L2012/40273

  the transportation system being a vehicle · CPC title

• B60W50/14

  Means for informing the driver, warning the driver or prompting a driver intervention · CPC title

• B60R25/30

  Detection related to theft or to other events relevant to anti-theft systems · CPC title