Data bus protection device and method
AssigneeC2A-SEC, Ltd.
InventorShlomo Oberman
Life of this patent
Estimating the term…
Abstract
A bus control device is enabled for placement between an input port to which a suspect device would be connected and the bus. In this manner, all message received from the suspect device, such an infotainment system, must pass through the bus control device. A separate intrusion detection device is coupled to the bus. The bus control device is arranged to output a notification message to the intrusion detection device, the notification message comprising information about the received message. The intrusion detection device is arranged to determine the validity of the received message responsive to the received notification message.
Claims16
A system for providing protection for devices on a common bus, the system comprising:
- an input port for connection to an unsecured device, said input port arranged to receive a message from said unsecured device;
- a bus control device coupled to said input port and the common bus, said bus control device arranged to:
- produce a notification message responsive to said received message, said notification message comprising information about said received message and different from said received message;
- and
- output said notification message onto the common bus with a target, and
- an intrusion detection device coupled to the common bus, said intrusion detection device arranged to receive said notification message over the common bus and determine the validity of said received message responsive to said received notification message,
- wherein said intrusion detection device is the target of said notification message,
- wherein said bus control device is arranged to produce said notification message by changing at least one bit of said received message to create said notification message, and
- wherein said at least one bit is changed in an identification field of said received message, thereby ensuring that said intrusion detection device coupled to the common bus is the target of said notification message and no other devices coupled to the common bus react to the output notification message.
A method of intrusion protection for a common bus, the method comprising:
- receiving a message from an unsecured device;
- producing a notification message responsive to said received message, said notification message comprising information about said received message and different from said received message;
- changing at least one bit of said received message to create said notification message;
- outputting said notification message onto the common bus with a target;
- receiving said notification message at an intrusion detection device coupled to the common bus, wherein said intrusion device is the target of said notification message;
- determining the validity of said received message, by said intrusion detection device, responsive to said received notification message;
- and
- in the event that the received message is determined not to be valid, outputting an alert message,
- wherein said intrusion detection device is the target of said output notification message,
- wherein said one bit is changed in an identification field of said received message, thereby ensuring that said intrusion detection device coupled to the common bus is the target of said output notification message and that no other devices coupled to the common bus react to the output notification message.
Dependencies are inferred from the claim text.