System and method for controlling access to a cyber-physical system

A method for controlling access to a cyber-physical system (CPS), the system including at least one electronic control unit (ECU) including at least one processor and memory operably coupled to the at least one processor, the method comprising:

• performing access authorization by:
• analyzing a plurality of messages sent through the CPS,
• creating a plurality of fictitious messages, the plurality of fictitious messages addressed to at least one of the ECUs to which the plurality of messages are addressed,
• sending the plurality of fictitious messages though the CPS in random order and with random delay, and
• checking whether correct authorization data is included in the analyzed messages to determine authorized or unauthorized access to the CPS;
• detecting a change in at least one functional CPS module related to unauthorized access to the CPS;
• and
• responsive to the detection of a change in at least one functional CPS module related to unauthorized access to the CPS, changing a state of at least one functional CPS module using at least one monitoring rule.

A vehicle comprising:

• a drivetrain gateway configured to deliver power to vehicle wheels;
• a multimedia gateway configured to control multimedia for the vehicle;
• a transmission gateway configured to control the vehicle wheels through the drivetrain gateway, wherein each of the drivetrain gateway, the multimedia gateway, and the transmission gateway includes at least one electronic control unit (ECU);
• at least one security tool configured to perform access authorization by:
• analyzing a plurality of messages sent through the vehicle,
• creating a plurality of fictitious messages,
• sending the plurality of fictitious messages though the vehicle, and
• checking whether correct authorization data is included in the analyzed messages to determine authorized or unauthorized access to the vehicle;
• and
• at least one access monitoring tool configured to:
• detect a change in at least one functional CPS module related to unauthorized access to the CPS, and
• responsive to the detection of a change in at least one functional CPS module related to unauthorized access to the CPS, change a state of at least one functional CPS module using at least one monitoring rule.