Security reporting via message tagging

Patent metadata

Field	Value
Publication number	US-12047398-B2
Application number	US-202218077205-A
Country	US
Kind code	B2
Filing date	Dec 7, 2022
Priority date	Dec 12, 2019
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

Techniques and screening messages based on tags in an automotive environment, such as, messages communicated via a communication bus, like the CAN bus. Messages can be tagged with either a binary or probabilistic tag indicating whether the message is fraudulent. ECUs coupled to the CAN bus can receive the messages and the message tags and can determine whether to fully consume the message based on the tag.

First claim

What is claimed is:

1. An apparatus, comprising:
an interface to communicate information over a communication link;
processing circuitry communicatively coupled to the interface, the processing circuitry to:
receive a message from the interface, the message to include a message identifier and information generated by an electronic control unit (ECU);
receive a message tag for the message from the interface separate from the message, the message tag to include the message identifier and an indication of a message status generated by security tagging circuitry;
determine the message identifier for the message matches the message identifier in the message tag; and
determine whether to process the message based on the message status indicated by the message tag.

2. The apparatus of claim 1 , wherein the message status is a binary indication of whether the message is authentic or not authentic.

3. The apparatus of claim 1 , the processing circuitry to process the message when the message status of the message tag indicates the message is authentic.

4. The apparatus of claim 1 , the processing circuitry to discard the message when the message status of the message tag indicates the message is not authentic.

5. The apparatus of claim 1 , the processing circuitry to:
determine the message status of the message tag indicates the message is not authentic;
compare the information generated by the ECU to information stored in a database; and
determine whether to process the message based on results of the comparison.

6. The apparatus of claim 1 , wherein the message tag further includes a probabilistic indication for the message status, the probabilistic indication to comprise a percentage amount of certainty that the message is authentic or not authentic.

7. The apparatus of claim 6 , the processing circuitry to:
determine the message status of the message tag indicates the message is not authentic;
compare the probabilistic indication of the message tag to a threshold value; and
determine whether to process the message based on results of the comparison.

8. The apparatus of claim 1 , the interface to receive the message and the message tag over the communication link, wherein the communication link is a communication bus for an in-vehicle network (IVN) or a sideband bus of the IVN.

9. The apparatus of claim 1 , wherein the interface and the processing circuitry are part of a single chip architecture.

10. A system, comprising:
a single microchip to comprise an interface and circuitry, the interface to communicate information, and the circuitry to:
receive a message from the interface, the message to include a message identifier and information generated by an electronic control unit (ECU);
receive a message tag for the message from the interface separate from the message, the message tag to include the message identifier and an indication of a message status generated by security tagging circuitry;
determine the message identifier for the message matches the message identifier in the message tag; and
determine whether to process the message based on the message status indicated by the message tag.

11. The system of claim 10 , wherein the message status is a binary indication of whether the message is authentic or not authentic.

12. The system of claim 10 , the circuitry to:
process the message when the message status of the message tag indicates the message is authentic; or
discard the message when the message status of the message tag indicates the message is not authentic.

13. The system of claim 10 , the circuitry to:
determine the message status of the message tag indicates the message is not authentic;
compare the information generated by the ECU to information stored in a database; and
determine whether to process the message based on results of the comparison.

14. The system of claim 10 , wherein the message tag further includes a probabilistic indication for the message status, the probabilistic indication to comprise a percentage amount of certainty that the message is authentic or not authentic.

15. The system of claim 14 , the circuitry to:
determine the message status of the message tag indicates the message is not authentic;
compare the probabilistic indication of the message tag to a threshold value; and
determine whether to process the message based on results of the comparison.

16. The system of claim 10 , comprising a communication bus communicatively coupled to the interface, the communication bus comprising part of an in-vehicle network (IVN).

17. An apparatus, comprising:
an interface to communicate information over a communication link;
security tagging circuitry coupled to the interface, the security tagging circuitry to:
receive a message from the interface, the message to include a message identifier and information generated by a first electronic control unit (ECU);
perform a security analysis of the message;
generate a message tag for the message, the message tag to include the message identifier and an indication of a message status for the message; and
send the message tag separate from the message to a second ECU via the interface.

18. The apparatus of claim 17 , wherein the message status is a binary indication of whether the message is authentic or not authentic.

19. The apparatus of claim 17 , wherein the message tag further includes a probabilistic indication for the message status, the probabilistic indication to comprise a percentage amount of certainty that the message is authentic or not authentic.

20. The apparatus of claim 17 , the interface to send the message tag to the second ECU over the communication link, wherein the communication link is a communication bus of an in-vehicle network (IVN) or a sideband bus of the IVN.

Assignees

• Intel Corp

Inventors

• Juliato Marcio
• Sastry Manoj
• Kara-Ivanov Michael
• Kipnis Aviad
• Ahmed Shabbir
• Gutierrez Christopher
• Lesi Vuk

Classifications

• H04L47/31

  by tagging of packets, e.g. using discard eligibility [DE] bits · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L63/0236

  Filtering by address, protocol, port number or service, e.g. IP-address or URL · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title