Illegal message destroyer

Patent metadata

Field	Value
Publication number	US-9894084-B2
Application number	US-201314898779-A
Country	US
Kind code	B2
Filing date	Jul 18, 2013
Priority date	Jul 18, 2013
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A communication apparatus for preventing the broadcasting of unauthorized messages on a broadcast bus network, the communication apparatus comprising:
a first memory adapted to store first information; a second memory adapted to store second information; a monitoring unit adapted to:
monitor the bus for processing messages being broadcasted on the bus, and output a third information and fourth information
a comparing unit adapted to compare the first information with the third information and the second information with the fourth information; and, a message destroyer adapted to:

when:
the first information matches with the third information, and the second information does not match with the fourth information, causing the body of the current message to be altered while the current message is being broadcasted on the bus.

First claim

The invention claimed is:

1. A communication system comprising: a first communication apparatus for receiving and/or broadcasting authorised messages on a broadcast bus network and for preventing the broadcasting of unauthorised messages on the broadcast bus the authorised and unauthorised messages comprising a header and a body wherein the header is broadcasted before the body and comprises an indication of the type of message being broadcasted, the communication apparatus comprising:
a first memory adapted to store first information with respect to at least one type of authorised messages which can be broadcasted by the communication apparatus;
a second memory adapted to store second information with respect to at least the last authorised message broadcasted by the communication apparatus;
a monitoring circuit coupled to the broadcast bus and adapted to:
monitor the broadcast bus for processing messages being broadcasted on the broadcast bus, and
output a third information with respect to a type of a current message being broadcasted on the broadcast bus and fourth information with respect to at least part of the header of the current message;

a comparing circuit coupled to the monitoring circuit, the first memory and the second memory, the comparing circuit being adapted to compare the first information with the third information and the second information with the fourth information; and,
a message destroyer circuit coupled to the comparing circuit and adapted to:
when:
the first information matches with the third information, and
the second information does not match with the fourth information, convert the current message into an erroneous message by causing the body of the current message to be altered while the current message is being broadcasted on the broadcast bus.

2. The communication system of claim 1 , wherein the message destroyer circuit is further adapted to alter at least part of the body of the current message.

3. The communication system of claim 1 , wherein the broadcast bus complies with a broadcast bus network standard such as Controller Area Network, CAN.

4. The communication system of claim 1 , further comprising:
at least one second communication apparatus similar to the first communication apparatus and adapted to receive authorised messages from the broadcast bus;
wherein:
the message destroyer circuit of the first communication apparatus is activated and
a message destroyer circuit of the second communication apparatus is deactivated; and,
the first and second communication apparatuses are further adapted to receive erroneous message broadcasted on the broadcast bus.

5. The communication system of claim 4 , wherein the first and second communication apparatuses are further adapted to discard the processing of an erroneous message.

6. The communication system of claim 4 , wherein at least the second communication apparatus is further adapted to enter into a safety state in response to the reception of an erroneous message.

7. A method of preventing the broadcasting of unauthorised messages on a broadcast bus network comprising at least one communication apparatus configured to receive and/or broadcast authorised messages on the broadcast bus, the authorised and unauthorised messages comprising a header and a body wherein the header is broadcasted before the body and comprises an indication of the type of message being broadcasted, the method comprising:
storing in a first memory of the communication apparatus a first information with respect to at least one type of authorised messages which can be broadcasted by the communication apparatus;
storing in a second memory of the communication apparatus a second information with respect to at least the last authorised message broadcasted by the communication apparatus;
monitoring the broadcast bus, and based on the monitoring, outputting a third information with respect to a type of a current message being broadcasted on the broadcast bus and a fourth information with respect to at least part of the header of the current message;
comparing the first information with the third information and the second information with the fourth information; and,
when:
the first information matches with the third information, and
the second information does not match with the fourth information converting the current message into an erroneous message by causing the body of the current message to be altered while the current message is being broadcasted on the broadcast bus.

8. The method of claim 7 , wherein in the step of converting, a message destroyer circuit is used to alter at least part of the body of the current message.

9. The method of claim 7 , wherein the broadcast bus complies with a broadcast bus network standard such as Controller Area Network, CAN.

10. A non-transitory computer program product stored in a non-transitory computer-readable storage medium for preventing broadcasting of unauthorized message on a broadcast bus network to perform the steps of:
storing in a first memory of a communication apparatus a first information with respect to at least one type of authorised messages which can be broadcasted by the communication apparatus;
storing in a second memory of the communication apparatus a second information with respect to at least the last authorised message broadcasted by the communication apparatus;
monitoring the broadcast bus, and based on the monitoring, outputting a third information with respect to a type of a current message being broadcasted on the broadcast bus and a fourth information with respect to at least part of a header of the current message;
comparing the first information with the third information and the second information with the fourth information; and,
when:
the first information matches with the third information, and
the second information does not match with the fourth information converting the current message into an erroneous message by causing body of the current message to be altered while the current message is being broadcasted on the broadcast bus.

Assignees

• Frank Juergen
• Staudenmaier Michael
• Thanner Manfred
• Nxp Usa Inc

Inventors

• Frank Juergen
• Staudenmaier Michael
• Thanner Manfred

Classifications

• H04L2012/40273

  the transportation system being a vehicle · CPC title

• H04L63/1416 Primary

  Event detection, e.g. attack signature detection · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L12/40032

  Details regarding a bus interface enhancer · CPC title