US 12,111,908 B2Granted

Lightweight electronic control unit fingerprinting

AssigneeIntel Corporation

InventorsEduardo Alban, Shabbir Ahmed, Marcio Juliato, Christopher Gutierrez, Qian Wang, Vuk Lesi, Manoj Sastry

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems, apparatuses, and methods to identify an electronic control unit transmitting a message on a communication bus, such as an in-vehicle network bus, are provided. ECUs transmit messages by manipulating voltage on conductive lines of the bus. Observation circuitry can observe voltage signals associated with the transmission at a point on the in-vehicle network bus. A distribution can be generated from densities of the voltage signals. ECUs can be identified and/or fingerprinted based on the distributions.

Claims20

Dependent claims

An apparatus, comprising:

processing circuitry;
and
memory coupled to the processing circuitry, the memory comprising instructions that when executed by the processing circuitry cause the processing circuitry to:
process a voltage waveform of a message from a communication bus;
determine a message identification (MID) from the message;
determine if the memory comprises a fingerprint associated with the MID;
generate a set of histograms from the voltage waveform after a failure to find the fingerprint associated with the MID in the memory;
generate a density from the set of histograms with a kernel based density function, the kernel based density function to fit the set of histograms as a sum of kernels;
generate an observed distribution from the density of the voltage waveform with a cumulative distribution function (CDF);
and
store the fingerprint with an indicator of the MID in the memory to associate the MID with the fingerprint, wherein the fingerprint comprises an indication of the observed distribution.

8 more elements

A system, comprising:

at least one electronic control unit (ECU);
and
an ECU identification sub-system coupled to the at least one ECU via an in-vehicle network (IVN), the ECU identification sub-system comprising:
processing circuitry;
and
memory coupled to the processing circuitry, the memory comprising instructions that when executed by the processing circuitry cause the processing circuitry to:
process a voltage waveform of a message from a communication bus of the IVN;
determine a message identification (MID) from the message;
determine if the memory comprises a fingerprint associated with the MID;
generate a set of histograms from the voltage waveform after a failure to find the fingerprint associated with the MID in the memory;
generate a density from the set of histograms with a kernel based density function, the kernel based density function to fit the set of histograms as a sum of kernels;
generate an observed distribution from the density of the voltage waveform with a cumulative distribution function (CDF);
and
store the fingerprint with an indicator of the MID in the memory to associate the MID with the fingerprint, wherein the fingerprint comprises an indication of the observed distribution.

11 more elements

At least one non-transitory computer-readable storage device comprising instructions that when executed by processing circuitry cause the processing circuitry to:

process a voltage waveform of a message from a communication bus;
determine a message identification (MID) from the message;
determine if the memory comprises a fingerprint associated with the MID;
generate a set of histograms from the voltage waveform after a failure to find the fingerprint associated with the MID in the memory;
generate a density from the set of histograms with a kernel based density function, the kernel based density function to fit the set of histograms as a sum of kernels;
generate an observed distribution from the density of the voltage waveform with a cumulative distribution function (CDF);
and
store the fingerprint with an indicator of the MID in the memory to associate the MID with the fingerprint, wherein the fingerprint comprises an indication of the observed distribution.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/215,924Filed 29 Jun 2023 · continuation
Priority: 14 Aug 2020
Published: US 2023/0342450 A126 Oct 2023
Granted: 8 Oct 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 13/20
Handling requests for interconnection or transfer: for access to input/output bus
G06F 21/73
To assure secure computing or processing of information: by creating or determining hardware identification, e.g. serial numbers
G06F 21/85
Protecting input, output or interconnection devices: interconnection devices, e.g. bus-connected or in-line devices

Family

Application16/994,219Parent of this continuation · filed 14 Aug 2020
US 2023/0342450 A1Pre-grant publication · published 26 Oct 2023
US 11,720,662 B2Parent of this continuation
US 2020/0372148 A1Published application
US 12,111,908 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key