Back to results
US 11,777,910 B2Granted
Systems and methods providing message encryption on a can bus using remote frames
AssigneesHyundai Motor Company, Kia Motors Corporation
InventorAshwin Kulkarni
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for implementing enhanced security measures for working against unwanted intrusion from outside attackers into a vehicle's controller area network (CAN) bus. The enhanced security measures utilize existing data frames that are transmitted within the CAN bus to encrypt message identifications (IDs) for certain messages that are related to important features of a vehicle.
Claims15
A computing device comprising:
- a data reception circuitry configured to receive a digital message communicated via a controller area network (CAN) bus;
- a data storage unit configured to store a plurality of databases, wherein each of the plurality of databases stores a respective data table including a mapping of an original message identifier (ID) to a secret message identifier (ID);
- a processing circuitry configured to:
- read the digital message to detect a message ID, wherein the message ID is included in an identifier field of a remote frame of the digital message;
- read the digital message to detect a database ID, wherein the database ID is included in a data length code (DLC) field of the remote frame of the digital message;
- retrieve a secret message ID mapping table stored on a database corresponding to the database ID;
- and
- transmit a return message on the CAN bus, wherein the return message replaces the message ID with the secret message ID.
5 more elements
A method comprising:
- receiving, by a data reception circuitry, a digital message communicated via a controller area network (CAN) bus;
- storing, in a data storage unit, a plurality of databases, wherein each of the plurality of databases stores a respective data table including a mapping of an original message identifier (ID) to a secret message identifier (ID);
- reading, by a processing circuitry, the digital message to detect a message ID, wherein the message ID is included in an identifier field of a remote frame of the digital message;
- reading, by the processing circuitry, the digital message to detect a database ID, wherein the database ID is included in a data length code (DLC) field of the remote frame of the digital message;
- retrieving, by the processing circuitry, a secret message ID mapping table stored on a database corresponding to the database ID;
- and
- transmitting, by the processing circuitry, a return message on the CAN bus, wherein the return message replaces the message ID with the secret message ID.
4 more elements
A computing device comprising:
- a processing circuitry configured to:
- store a message ID in an identifier field of a digital message, wherein the message ID is included in an identifier field of a remote frame of the digital message;
- and
- store a database ID in a data field of the digital message, wherein the database ID identifies a database including a secret ID mapping table stored on the computing device, and wherein the database ID is included in a data length code (DLC) field of the remote frame of the digital message;
- and
- a data transmission circuitry configured to transmit the digital message on a controller area network (CAN) bus.
3 more elements
Dependencies are inferred from the claim text.