System and method for firewalls between vehicle networks

A vehicle comprising:

• a communication system providing a connection to one or more communication networks or devices outside of the vehicle;
• a first set of internal networks within the vehicle;
• a second set of internal networks within the vehicle;
• and
• an in-vehicle security appliance coupled with the communication system, the first set of internal networks, and the second set of internal networks, the in-vehicle security appliance comprising:
• a plurality of external network interfaces, each external network interface of the plurality of external network interfaces providing a connection to the one or more communication networks or devices outside of the vehicle through the communication system,
• a first plurality of internal network interfaces, each internal network interface of the first plurality of internal network interfaces providing a connection to a network of the first set of internal networks,
• a second plurality of internal network interfaces, each internal network interface of the second plurality of internal network interfaces providing a connection to a network of the second set of internal networks,
• a Telematics Control Unit (TCU) processor in the vehicle and coupled between the plurality of external network interfaces and the first plurality of internal network interfaces,
• a gateway processor in the vehicle and coupled between the TCU processor and the second plurality of internal network interfaces,
• wherein the TCU processor executes one or more applications providing network security on the first set of internal networks and the second set of internal networks by providing a firewall between the first set of internal networks and the one or more communication networks or devices outside of the vehicle and between the first set of internal networks and the second set of internal networks,
• wherein the gateway processor executes one or more applications providing network security on the second set of internal networks within the vehicle by providing a firewall between the second set of internal networks and the one or more communication networks or devices outside of the vehicle and between the TCU processor and the second set of internal networks,
• wherein the first set of internal networks within the vehicle is separate from the second set of internal networks within the vehicle, and
• wherein the TCU processor is i) coupled between the gateway processor and the plurality of external network interfaces, and ii) coupled between the gateway processor and the first plurality of internal network interfaces, such that the TCU processor is i) in a first communication path between the gateway processor and the plurality of external network interfaces and, ii) in a second communication path between the gateway processor and the first plurality of internal network interfaces,
• wherein the TCU and gateway processor are in electrical communication with each other,
• wherein the second set of internal networks within the vehicle comprises one or more Controller Area Networks (CANs) and Local Interface Networks (LINs) of the vehicle,
• wherein the first set of internal networks within the vehicle comprises one or more networks other than CANs and LINs,
• wherein the TCU processor executes the one or more applications providing network security on the first set of internal networks and the second set of internal networks by monitoring incoming traffic from the one or more communication networks or devices outside of the vehicle to the first set of internal networks and the second set of internal networks and outbound traffic from the first set of internal networks and the second set of internal networks to the one or more communication networks or devices outside of the vehicle to provide the firewalls,
• wherein the gateway processor does not execute the one or more applications providing network security on the first set of internal networks, and
• wherein at least one of the external network interfaces comprises an Off-Board Diagnostics (OBD) connection, and
• a vehicle control system that, while each of the TCU and gateway processor monitors inbound and outbound traffic on the first set of internal networks and the second set of internal networks, respectively, is programmed to continually monitor traffic, vehicular, roadway, and/or environmental conditions while operating the vehicle.

A method for providing network security within a vehicle, the method comprising:

• connecting, by a plurality of external network interfaces of an in-vehicle security appliance in the vehicle, to a communication network or device outside of a vehicle;
• connecting, by a first plurality of internal network interfaces of the in-vehicle security appliance, to a network of a first set of networks within the vehicle;
• connecting, by a second plurality of internal network interfaces of the in-vehicle security appliance, to a network of a second set of networks within the vehicle;
• executing, by a Telematics Control Unit (TCU) processor of the in-vehicle security appliance coupled between the plurality of external network interfaces and the first plurality of internal network interfaces, one or more applications providing network security on the first set of networks and the second set of networks by providing a firewall between the first set of networks and the communication network or device outside of the vehicle and between the first set of networks and the second set of networks;
• executing, by a gateway processor of the in-vehicle security appliance coupled between the TCU processor and the second plurality of internal network interfaces, one or more applications providing network security on the second set of networks within the vehicle by providing a firewall between the second set of networks and the communication network or device outside of the vehicle,
• wherein the first set of networks within the vehicle is separate from the second set of networks within the vehicle,
• wherein the TCU processor is i) coupled between the gateway processor and the plurality of external network interfaces, and ii) coupled between the gateway processor and the first plurality of internal network interfaces, such that the TCU processor is i) in a first communication path between the gateway processor and the plurality of external network interfaces and, ii) in a second communication path between the gateway processor and the first plurality of internal network interfaces,
• wherein executing, by the TCU processor, the one or more applications providing network security on the first set of networks and the second set of networks comprises monitoring incoming traffic from communication networks or devices outside of the vehicle to the first set of networks and the second set of networks and outbound traffic from the first set of networks and the second set of networks to the communication networks or devices outside of the vehicle to provide the firewalls,
• wherein the gateway processor does not execute the one or more applications providing network security on the first set of networks, and
• wherein at least one of the plurality of external network interfaces comprises an Off-Board Diagnostics (OBD) connection;
• and
• continually monitoring, by a vehicle control system, while each of the TCU and gateway processors monitors inbound and outbound traffic on the first set of networks and the second set of networks, respectively, traffic, vehicular, roadway, and/or environmental conditions while operating the vehicle.