# US 11,444,921 B2 · Vehicular firewall providing device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,444,921 B2 - Document ID: US11444921B2 - Status: Granted - Kind: B2 - Application number: 16/500,690 - Filed: 2019-07-16 - Published: 2021-09-23 - Granted: 2022-09-13 - Earliest claimed: 2019-07-16 - Assignees: LG Electronics Inc. - Applicants: LG Electronics Inc. - Inventors: Junsang Park; Youngil Kim - Web page: https://patentgrep.com/patent/US11444921B2 ## CPC - H04L 63/0263: {Rule management} - B60W 30/14: {Adaptive} cruise control - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/101: {Access control lists [ACL]} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P] - H04L 49/505: Corrective measures - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A vehicular firewall providing device includes a processor configured to match a data packet received from an external device and a plurality of rules at a set order, and to perform rule reordering defined to change the order based on a matching result. The processor is further configured to perform the rule reordering after the state, in which the vehicle autonomously travels, is terminated, upon detecting a hacking attack sign in a state in which a vehicle autonomously travels. ## Claims ### Claim 1 A vehicular firewall providing device comprising: a processor configured to match a data packet received from an external device and a plurality of rules at a set order, and perform rule reordering defined to change the order based on a result of the matching of the data packet, wherein, upon detecting a hacking attack sign in a state in which a vehicle autonomously travels, the processor is configured to perform the rule reordering after the state, in which the vehicle autonomously travels, is terminated. ### Claim 2 (depends on 1) The vehicular firewall providing device of claim 1, wherein the plurality of rules include: a black list rule generated based on an Internet protocol (IP) address and a port, and defined as a list of a data packet excluded from a processing target; and a white list rule generated based on an IP address and a port, and defined as a list of a data packet included in the processing target. ### Claim 3 (depends on 1) The vehicular firewall providing device of claim 1, wherein the processor is configured to perform the rule reordering when a hit count for a first rule of the plurality of rules is satisfied, and wherein the hit count is defined as a number of times that a data packet matches the first rule. ### Claim 4 (depends on 1) The vehicular firewall providing device of claim 1, wherein the processor is configured to perform the rule reordering when a vehicle is positioned in a specific location. ### Claim 5 (depends on 2) The vehicular firewall providing device of claim 2, wherein the processor is configured to include: a Kernel space defined as a space for executing a device driver; and a user space defined as a space in which an application is executed. ### Claim 6 (depends on 5) The vehicular firewall providing device of claim 5, wherein the Kernel space includes: a netfilter configured to filter a data packet based on the black list rule and the white list rule according to a first requirement; and a first detector configured to perform hooking on a data packet input to the netfilter. ### Claim 7 (depends on 6) The vehicular firewall providing device of claim 6, wherein the first detector filters the data packet, on which hooking is performed based on the black list rule, according to a second requirement different from the first requirement. ### Claim 8 (depends on 6) The vehicular firewall providing device of claim 6, wherein the user space includes: a packet handler configured to receive a data packet from the netfilter; a second detector configured to select a data packet received through the packet handler as a filter target according to a third requirement different from the first requirement based on the black list rule and the white list rule; and a reordering configured to perform rule reordering and to provide a reordered rule to the first detector and the second detector. ### Claim 9 (depends on 8) The vehicular firewall providing device of claim 8, wherein the packet handler provides information on the filtering target to the netfilter; and wherein the netfilter excludes the data packet as the filtering target from the processing target. ### Claim 10 (depends on 5) The vehicular firewall providing device of claim 5, wherein the processor is configured to perform reordering on a black list rule used in the user space. ### Claim 11 (depends on 5) The vehicular firewall providing device of claim 5, wherein the processor is configured to perform reordering on a white list rule used in the user space. ### Claim 12 (depends on 6) The vehicular firewall providing device of claim 6, wherein, upon detecting a hacking attack sign, the processor is configured to activate the first detector. ### Claim 13 (depends on 5) The vehicular firewall providing device of claim 5, wherein the processor is configured to perform reordering on a black list rule used in the Kernel space. ### Claim 14 (depends on 5) The vehicular firewall providing device of claim 5, wherein the processor is configured to perform reordering on a black list rule used in the Kernel space based on a matching result of a data packet in the user space and the black list rule. ### Claim 15 A vehicular firewall providing device comprising: a processor configured to match a data packet received from an external device and a plurality of rules at a set order, and perform rule reordering defined to change the order based on a result of the matching of the data packet, wherein the processor is configured to perform the rule reordering when a vehicle is positioned in a specific location. ### Claim 16 (depends on 15) The vehicular firewall providing device of claim 15, wherein the processor is configured to include a Kernel space defined as a space for executing a device driver, and wherein the Kernel space includes: a netfilter configured to filter a data packet based on a black list rule and a white list rule according to a set requirement; and a first detector configured to perform hooking on a data packet input to the netfilter. ### Claim 17 A vehicular firewall providing device comprising: a processor configured to match a data packet received from an external device and a plurality of rules at a set order, and perform rule reordering defined to change the order based on a result of the matching of the data packet, wherein the plurality of rules include: a black list rule generated based on an Internet protocol (IP) address and a port, and defined as a list of a data packet excluded from a processing target; and a white list rule generated based on an IP address and a port, and defined as a list of a data packet included in the processing target, wherein the processor is configured to include: a Kernel space defined as a space for executing a device driver; and a user space defined as a space in which an application is executed, and wherein the processor is configured to perform reordering on a black list rule or a white list rule used in the user space.