# US 12,003,519 B2 · Cyber-physical system for detecting pole-dynamics attack > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,519 B2 - Document ID: US12003519B2 - Status: Granted - Kind: B2 - Application number: 17/477,835 - Filed: 2021-09-17 - Published: 2022-05-19 - Granted: 2024-06-04 - Earliest claimed: 2020-11-19 - Assignees: Daegu Gyeongbuk Institute of Science and Technology - Applicants: Daegu Gyeongbuk Institute of Science and Technology - Inventors: Heegyun Jeon; Yongsoon Eun - Web page: https://patentgrep.com/patent/US12003519B2 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04K 3/22: {including jamming detection and monitoring} - H04K 3/65: {using deceptive jamming or spoofing, e.g. transmission of false signals for premature triggering of RCIED, for forced connection or disconnection to/from a network or for generation of dummy target signal} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)} - H04L 63/162: {at the data link layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04K: SECRET COMMUNICATION; JAMMING OF COMMUNICATION ## Abstract Disclosed is a cyber-physical system for detecting a pole-dynamics attack, including an attack detector configured to receive a sensor signal output from a physical system and to output an attack detection signal based on the received sensor signal, and a mode controller configured to receive the sensor signal and to output an input control signal for controlling the physical system based on the received sensor signal, wherein the mode controller controls a normal control (NC) mode and an attack detection control (ADC) mode for detecting pole-dynamics attack (PDA) from an output to be repeatedly executed at a preset switching period. ## Claims ### Claim 1 A cyber-physical system comprising: a memory configured to store computer-readable instructions: and one or more processors configured to execute the computer-readable instructions such that the one or more processors are configured to, receive a sensor signal output from a physical system and to output an attack detection signal based on the received sensor signal; and receive the sensor signal and to output an input control signal for controlling the physical system based on the received sensor signal, wherein the one or more processors are further configured to control a normal control (NC) mode and an attack detection control (ADC) mode for detecting a pole-dynamics attack (PDA) from an output to be repeatedly executed at a preset switching period. ### Claim 2 (depends on 1) The cyber-physical system according to claim 1, wherein the one or more processors are further configured to be provided on a feedback line connecting an input end and an output end of the physical system and activated in the ADC mode. ### Claim 3 (depends on 2) The cyber-physical system according to claim 2, wherein the one or more processors are further configured to receive the sensor signal and output a control input signal obtained by performing calculation of a predetermined design coefficient on the received sensor signal. ### Claim 4 (depends on 1) The cyber-physical system according to claim 1, wherein the one or more processors are further configured to determine whether there is an attack on or error in the physical system by comparing the attack detection signal with a preset attack detection threshold and determine stability of the physical system by comparing a preset state variable with a preset safety determination threshold in response to the physical system. ### Claim 5 (depends on 1) The cyber-physical system according to claim 1, wherein the one or more processors are further configured to control at least one of a switching period of the NC mode and a switching period of the ADC mode. ### Claim 6 (depends on 5) The cyber-physical system according to claim 5, wherein the one or more processors are further configured to control the switching period of the NC mode based on a maximum value of the switching period of the NC mode that is inversely proportional to a preset safety determination threshold. ### Claim 7 (depends on 5) The cyber-physical system according to claim 5, wherein the one or more processors are further configured to control the switching period of the NC mode based on a maximum value of the switching period of the NC mode that is calculated through Expression 1 below: T ¯ = 1 λ ι ⁢ ι ⁢ ln (  C  ⁢ M v u ⁢ δ ) [ Expression ⁢ ⁢ 1 ] where T is a maximum value of the switching period of the NC mode, vu and λ0 are constants satisfying a condition ∥e∥≤vueλut, δ is an attack detection threshold, M is a safety determination threshold, and A and C are system matrices constituting a linear model corresponding to the physical system. ### Claim 8 (depends on 5) The cyber-physical system according to claim 5, wherein the one or more processors are further configured to control the switching period of the ADC mode based on a minimum value of the switching period of the ADC mode that is inversely proportional to a preset design coefficient of the secret entity. ### Claim 9 (depends on 5) The cyber-physical system according to claim 5, wherein the one or more processors are further configured to control the switching period of the ADC mode based on a minimum value of the switching period of the ADC mode calculated using Expression 2 below: T ¯ = 1 λ u ⁢ ln ( 1 + λ d , 2 + λ u ν d , 2 ⁢ ν u ⁢  BFC  ) < T 2 [ Expression ⁢ ⁢ 2 ] where T is a minimum value of the switching period of the ADC mode, vu, λu, vd,2, and λd,2 and are constants satisfying ∥eAt∥≤vueλut and ∥eAd,2t∥≤Vd,2e−λd,2t, F is a design coefficient, and B and C are system matrices constituting a linear model corresponding to the physical system. ### Claim 10 (depends on 5) The cyber-physical system according to claim 5, wherein the one or more processors are further configured to control the switching period of the NC mode and the switching period of the ADC mode to satisfy Expression 3 below: T 2 > 1 λ 2 ⁢ ( ln ⁡ ( v 1 ⁢ v 2 ) - λ 1 ⁢ T 1 ) [ Expression ⁢ ⁢ 3 ] where T1 is the switching period of the NC mode, T2 is the switching period of the ADC mode, and vi and λi (i being 1 or 2) are constants satisfying a condition ∥eAit∥≤vie−λit.