Security processing method and server

Patent metadata

Field	Value
Publication number	US-2018295147-A1
Application number	US-201816004492-A
Country	US
Kind code	A1
Filing date	Jun 11, 2018
Priority date	Dec 16, 2015
Publication date	Oct 11, 2018
Grant date	—

Abstract

An anomaly detection server is provided. The anomaly detection server is a server for counteracting an anomalous frame transmitted on an on-board network of a single vehicle. The anomaly detection server acquires information about multiple frames received on one or multiple on-board networks of one or multiple vehicles, including the single vehicle. The anomaly detection server, acting as an assessment unit that, based on the information about the multiple frames and information about a frame received on the on-board network of the single vehicle after the acquisition of the information about the multiple frames, assesses an anomaly level of the frame received on the on-board network of the single vehicle.

First claim

What is claimed is:

1 . A security processing method, executed by a computer, for counteracting an anomalous frame transmitted on an on-board network of a single vehicle, the security processing method comprising:
acquiring, by the computer, information about multiple frames received on one or multiple on-board networks of one or multiple vehicles; and assessing, by the computer, an anomaly level of a frame received on the on-board network of the single vehicle after the reception of the multiple frames, based on the acquired information about the multiple frames.

2 . The security processing method according to claim 1 , wherein
the acquired information about the multiple frames includes at least partial content of the frames, an acquisition of the acquired information about the multiple frames is a successive acquisition of information about each of the multiple frames, in the security processing method, a designated model is successively updated based on the successively acquired information about the multiple frames, and an assessment of the anomaly level of the frame received on the on-board network of the single vehicle is performed by computational processing using information about the frame, and the designated model.

3 . The security processing method according to claim 2 , wherein
the designated model is successively updated by machine learning, based on the successively acquired information about the multiple frames.

4 . The security processing method according to claim 1 , further comprising:
performing the acquiring by having a server communicable with the one or multiple vehicles and the single vehicle acquire the information about the multiple frames received on the on-board network of each vehicle from each of the one or multiple vehicles; having the server receive information about the frame received on the on-board network of the single vehicle from the single vehicle; performing an assessment of the anomaly level of the frame involving the information about the frame, based on the information about the multiple frames; deciding content of transmission information to be transmitted to the single vehicle in accordance with the anomaly level assessed in the assessment; and transmitting, by the server, the transmission information with the content to the single vehicle.

5 . The security processing method according to claim 4 , wherein
the information about the frame received on the on-board network of the single vehicle includes identification information of the frame, and in the deciding, the content of the transmission information is decided in accordance with the identification information of the frame in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous.

6 . The security processing method according to claim 5 , wherein
in the deciding, in a case in which the identification information of the frame whose anomaly level is assessed to indicate that the frame is anomalous in the assessment is certain identification information, control information giving an instruction to stop running or reduce a running speed of the single vehicle is included in the transmission information.

7 . The security processing method according to claim 4 , wherein
in the transmitting, it is decided, as a decision, whether or not to transmit certain transmission information to vehicles having a certain relationship with the single vehicle in accordance with the anomaly level assessed in the assessment, and a transmission of the certain transmission information is controlled by following the decision.

8 . The security processing method according to claim 7 , wherein
the information about the frame received on the on-board network of the single vehicle includes identification information of the frame, and in the transmitting, it is decided whether or not to transmit the certain transmission information to vehicles having a same configuration of the on-board network as the single vehicle, in accordance with the identification information of the frame in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous, and a transmission of the certain transmission information is controlled by following the decision.

9 . The security processing method according to claim 7 , wherein
the information about the frame received on the on-board network of the single vehicle includes identification information of the frame, and in the transmitting, it is decided whether or not to transmit the certain transmission information to vehicles provided with an electronic controller of a same type as an electronic controller that transmits the frame identified by the identification information in the on-board network of the single vehicle, in accordance with the identification information of the frame in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous, and a transmission of the certain transmission information is controlled by following the decision.

10 . The security processing method according to claim 4 , wherein
in the transmitting, a transmission time of transmission information to transmit to the single vehicle is decided in accordance with the anomaly level assessed in the assessment, and the transmission information is transmitted to the single vehicle at the transmission time.

11 . The security processing method according to claim 4 , wherein
in the deciding, in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous, when a same anomaly as an anomaly related to the frame is already occurring in one or multiple vehicles having a same configuration of the on-board network as the single vehicle, the content of the transmission information to be transmitted to the single vehicle is decided based on a number of vehicles in which the anomaly is occurring or a distance between the single vehicle and the vehicles in which the anomaly is occurring.

12 . The security processing method according to claim 4 , wherein
in the deciding, in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous, fraud detection information indicating a rule or an algorithm for detecting a same anomaly as an anomaly on the on-board network is included in the transmission information.

13 . The security processing method according to claim 4 , wherein
the information about the frame received on the on-board network of the single vehicle includes identification information of the frame, and in the deciding, in a case in which the anomaly level of the frame assessed in the assessment indicates that the frame is anomalous, when the identification information of the frame is prescribed in advance for a frame for transmitting data by applying cryptographic processing technology, control information giving an instruction to update a key used when applying the cryptographic processing technology is included in the transmission information.

14 . A server for counteracting an anomalous frame transmitted on an on-board network of a single vehicle, the server comprising:
processing circuitry; and a storage including at least one set of instructions that, when executed by the processing circuitry, causes the processing circuitry to perform operations including:
acquiring information about multiple frames received on one or multiple on-board networks of one or multiple vehicles, the one or multiple vehicles including the single vehicle; and
assessing, based on

Assignees

• Panasonic Ip Corp America

Inventors

• Haga Tomoyuki
• Matsushima Hideki
• Maeda Manabu
• Ujiie Yoshihiro
• Kishikawa Takeshi
• Tsurumi Junichi
• Anzai Jun

Classifications

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L12/40

  Bus networks · CPC title

• H04W4/08

  User group management · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title