System and method for detection and prevention of cyber attacks at in-vehicle networks
AssigneeHigh Sec Labs Ltd.
InventorAviv Soffer
Life of this patent
Estimating the term…
Abstract
A cyber security system for in-vehicle networks comprises a plurality of electronic control units (ECUs) communicating via a vehicle bus. The system comprises a plurality of bus security units (BSUs), wherein each BSU is configured to be connected between the vehicle bus and one of the ECUs, and the BSUs communicating via a security bus separate from the vehicle bus. Each BSU is configured to monitor the activity of the corresponding ECU, on the vehicle bus, send the monitored activity to another BSU on the security bus and detect abnormal communication on the vehicle bus.
Claims20
A cyber security system for in-vehicle networks comprising a plurality of electronic control units (ECUs) communicating via a vehicle bus, the system comprising:
- a plurality of bus security units (BSUs), wherein each BSU is configured to be connected between the vehicle bus and one of the ECUs, and the BSUs communicating via a security bus separate from the vehicle bus,
- wherein each BSU is configured to:
- monitor the activity of the corresponding ECU, on the vehicle bus;
- send the monitored activity to another BSU on the security bus;
- detect abnormal communication on the vehicle bus;
- and
- perform at least one of the following security operations:
- (a) disconnecting the corresponding ECU from the vehicle bus;
- (b) firewalling between the vehicle bus and the corresponding ECU;
- and
- (c) bridging between the corresponding ECU and another ECU by bypassing the vehicle bus using the security bus instead.
A method of cyber security protection for in-vehicle networks comprising a plurality of electronic control units (ECUs) communicating via a vehicle bus, the method comprising:
- connecting a plurality of bus security units (BSUs) between the vehicle bus and one of the ECUs;
- connecting the BSUs to communicate via a security bus separate from the vehicle bus;
- monitoring, by each BSU, the activity of the corresponding ECU, on the vehicle bus;
- sending, by each BSU, the monitored activity to another BSU on the security bus;
- detecting, by each BSU, abnormal communication on the vehicle bus;
- and
- performing at least one of the following security operations:
- (a) disconnecting the corresponding ECU from the vehicle bus;
- (b) firewalling between the vehicle bus and the corresponding ECU;
- and
- (c) bridging between the corresponding ECU and another ECU by bypassing the vehicle bus and using the security bus instead.
A bus security unit (BSU) for communication with an electronic control unit (ECU) communicating via a vehicle bus, the BSU comprising:
- at least one vehicle bus transceiver, configured to communicate with at least one of the ECU and the vehicle bus;
- at least one controller, coupled to the at least one vehicle bus transceiver, wherein the at least one controller is configured to block communication with detected abnormal messages;
- and
- a secured interface, configured to connect the BSU to a security bus separate from the vehicle bus,
- wherein the BSU is configured to:
- monitor the activity of the ECU, on the vehicle bus;
- send the monitored activity to another BSU on the security bus;
- detect abnormal communication on the vehicle bus;
- and
- perform at least one of the following security operations:
- (a) disconnecting the corresponding ECU from the vehicle bus;
- (b) firewalling between the vehicle bus and the corresponding ECU;
- and
- (c) bridging between the corresponding ECU and another ECU by bypassing the vehicle bus using the security bus instead.
Dependencies are inferred from the claim text.