Apparatus and method for preventing leakage of vehicle information

Patent metadata

Field	Value
Publication number	US-9290136-B2
Application number	US-201414475631-A
Country	US
Kind code	B2
Filing date	Sep 3, 2014
Priority date	May 30, 2014
Publication date	Mar 22, 2016
Grant date	Mar 22, 2016

Abstract

An apparatus and method for preventing the leakage of vehicle information in a normal communication environment by inserting fake communication data into vehicle communication traffic on a vehicle network. In the method for preventing leakage of vehicle information, a vehicle information leakage prevention apparatus connected to an in-vehicle module analyzes a vehicle communication protocol between the module and another module. It is determined whether encryption has been applied to the vehicle communication protocol, based on results of analysis of the vehicle communication protocol. A method of generating fake communication data is selected depending on whether encryption has been applied to the vehicle communication protocol. A fake communication data is generated depending on the selected method, and the generated fake communication data is transferred to a vehicle information leakage prevention apparatus connected to the other module.

First claim

What is claimed is:

1. A method for preventing leakage of vehicle information, comprising:
analyzing, by a vehicle information leakage prevention apparatus connected to an in-vehicle module, a vehicle communication protocol between the module and another module;
determining whether encryption has been applied to the vehicle communication protocol, based on results of analysis of the vehicle communication protocol;
selecting a method of generating fake communication data depending on whether encryption has been applied to the vehicle communication protocol; and
generating fake communication data depending on the selected method, and transferring the generated fake communication data to a vehicle information leakage prevention apparatus connected to the other module,
wherein transferring the generated fake communication data comprises, if it is determined that encryption has not been applied to the vehicle communication protocol, inserting a normal OTP into communication data when status of communication between the modules is normal, and inserting a random OTP into the communication data when the status of communication is fake, thus generating the fake communication data.

2. The method of claim 1 , wherein selecting the method comprises selecting a method of inserting a basic identification value if it is determined that encryption has been applied to the vehicle communication protocol.

3. The method of claim 1 , wherein selecting the method comprises selecting a method of inserting a One-Time Password (OTP) if it is determined that encryption has not been applied to the vehicle communication protocol.

4. The method of claim 1 , wherein the normal OTP and the random OTP are provided from an OTP server.

5. An apparatus for preventing leakage of vehicle information, comprising:
a protocol analysis unit for analyzing a vehicle communication protocol between an in-vehicle module and another module and determining whether encryption has been applied to the vehicle communication protocol, based on results of analysis;
an identification value insertion unit for, if it is determined that encryption has been applied to the vehicle communication protocol, inserting a basic identification value into communication data, thus generating fake communication data;
a One-Time Password (OTP) insertion unit for, if it is determined that encryption has not been applied to the vehicle communication protocol, inserting an OTP into the communication data depending on status of communication between the module and the other module, thus generating fake communication data; and
a data transmission unit for transferring the fake communication data generated by the identification value insertion unit or the OTP insertion unit to a vehicle information leakage prevention apparatus connected to the other module,
wherein the OTP insertion unit is configured to, if the status of communication between the modules is normal, insert a normal OTP into the communication data, and if the status of communication is fake, insert a random OTP into the communication data, thus generating the fake communication data.

6. The apparatus of claim 5 , wherein the OTP insertion unit is provided with the normal OTP and the random OTP from an OTP server.

7. The apparatus of claim 5 , further comprising a method selection unit for selecting a method for generating fake communication data depending on whether encryption has been applied to the vehicle communication protocol.

8. The apparatus of claim 7 , wherein the method selection unit is configured to, if encryption has been applied to the vehicle communication protocol, select a method of inserting a basic identification value, and if encryption has not been applied to the vehicle communication protocol, select a method of inserting an OTP.

Assignees

• Korea Electronics Telecomm

Inventors

• Jeon Sungho
• Yun Jeong-Han
• Kim Woonyon
• Seo Jungtaek
• Park Eung Ki

Classifications

• B60R25/00 Primary

  Fittings or systems for preventing or indicating unauthorised use or theft of vehicles (locks for vehicles E05B77/00-E05B85/00) · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L12/6418

  Hybrid transport · CPC title

• H04L63/1475

  Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored · CPC title