Receiving device, monitor and computer program
AssigneesAutonetworks Technologies, Ltd., Sumitomo Wiring Systems, Ltd., Sumitomo Electric Industries, Ltd.
InventorsHiroshi Tateishi, Hiroshi Ueda, Ryo Tanaka, Tetsuya Noda, Shogo Kamiguchi
Life of this patent
Estimating the term…
Abstract
In a relay device, a transmitting/receiving unit of an ECU relay receives data. A first counter value is incremented if an amount of data received by the transmitting/receiving unit per unit time exceeds a first threshold. A second counter value is incremented if the amount of data received by the transmitting/receiving unit per unit time exceeds a second threshold. The second threshold is greater than the first threshold. A control unit of a bus relay repeatedly monitors the first counter value. If the first counter value is incremented, the control unit shortens a cycle with which the second counter value is monitored.
Claims9
A relay device comprising:
- a processor for executing a computer program stored on a non-transitory memory;
- a receiver with a receiving unit configured to receive data;
- and a monitor configured to monitor a state in which the receiving unit receives data,
- the computer program causing the receiver to execute the following steps:
- actuate a first adjustment unit, the first adjustment unit being a software program configured to periodically increment a first variable value by a first predetermined value, and decrement, each time data is received by the receiving unit, the first variable value by a data value that corresponds to an amount of the data received by the receiving unit;
- actuate a first counter, the first counter being a software program configured to increment, upon data being received by the receiving unit, a first counter value if the first variable value before being decremented by the first adjustment unit is less than the data value;
- actuate a second adjustment unit, the second adjustment unit being a software program configured to periodically increment a second variable value by a second predetermined value, which is greater than the first predetermined value, and decrement, each time data is received by the receiving unit, the second variable value by the data value;
- and
- actuate a second counter, the second counter being a software program configured to increment, upon data being received by the receiving unit, a second counter value if the second variable value before being decremented by the second adjustment unit is less than the data value, and
- the computer program causing the monitor to execute the following steps:
- actuate a first determination unit, the first determination unit being a software program configured to repeatedly monitor the first counter value, and determine whether or not the first counter value has been incremented;
- actuate a second determination unit, the second determination unit being a software program configured to periodically monitor the second counter value, and determine whether or not the second counter value has been incremented;
- and
- actuate a shortening unit, the shortening unit being a software program configured to shorten a monitoring cycle with which the second determination unit monitors the second counter value, if it is determined by the first determination unit that the first counter value has been incremented;
- and
- wherein the monitor determines that an attack in which unwanted data is continuously transmitted at short time intervals occurs if it is determined that the second counter value has been incremented.
A monitor configured to periodically monitor a state in which data is received, the monitor including a processor for executing a computer program stored on a non-transitory memory, which when executed performs operations comprising:
- actuating a first determination unit, the first determination unit being a software program configured to repeatedly monitor a first counter value, which is incremented if an amount of data received per unit time exceeds a first threshold, and determine whether or not the first counter value has been incremented;
- actuating a second determination unit, the second determination unit being a software program configured to periodically monitor a second counter value, which is incremented if an amount of data received per unit time exceeds a second threshold, and determine whether or not the second counter value has been incremented, the second threshold being greater than the first threshold;
- and
- actuating a shortening unit, the shortening unit being a software program configured to shorten a monitoring cycle with which the second determination unit monitors the second counter value, if it is determined by the first determination unit that the first counter value has been incremented;
- and
- wherein the monitor determines that an attack in which unwanted data is continuously transmitted at short time intervals occurs if it is determined that the second counter value has been incremented.
A computer program product comprising a non-transitory, machine-readable medium storing instructions which, when executed by at least one programmable processor, caused at least one programmable processor to perform operations comprising:
- repeatedly acquiring a first counter value, which is incremented if an amount of data received per unit time exceeds a first threshold;
- determining whether or not the first counter value has been incremented;
- periodically acquiring a second counter value, which is incremented if an amount of data received per unit time exceeds a second threshold, the second threshold being greater than the first threshold;
- and
- shortening a cycle with which the second counter value is acquired, if it is determined that the first counter value has been incremented;
- and
- wherein an attack in which unwanted data is continuously transmitted at short time intervals occurs if it is determined that the second counter value has been incremented.
Dependencies are inferred from the claim text.