# US 12,192,215 B2 · Method and architecture for providing integrated design of cyber-physical system with watermarking > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,215 B2 - Document ID: US12192215B2 - Status: Granted - Kind: B2 - Application number: 17/939,577 - Filed: 2022-09-07 - Published: 2024-03-07 - Granted: 2025-01-07 - Earliest claimed: 2022-09-07 - Assignees: Xerox Corporation - Applicants: Palo Alto Research Center Incorporated - Inventors: Raman Goyal; Christoforos Somarakis; Erfaun Noorani; Aleksandar B. Feldman; Shantanu Rane - Web page: https://patentgrep.com/patent/US12192215B2 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L 63/30: {for supporting lawful interception, monitoring or retaining of communications or communication related information (circuit switched telephony call monitoring H04M3/2281)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments described herein provide a design architecture for co-designing a controller and a watermarking signal for a cyber-physical system. During operation, the architecture can determine, in conjunction with each other, respective values of a first set of parameters indicating operations of the controller and a second set of parameters representing the watermarking signal. Here, the watermarking signal is combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at different time instances. Subsequently, the architecture can determine a state manager for determining the states of the cyber-physical system from the monitored output signal based on the first and second sets of parameters. The architecture can also determine a detector capable of identifying presence of an attack from the states of the cyber-physical system at a plurality of time instances using the watermarking signal. ## Claims ### Claim 1 A computer-executable method for co-designing a controller and a watermarking signal for a cyber-physical system, the method comprising: determining a first set of values of a first set of parameters indicating operations of the controller based on an initial set of values of a second set of parameters representing the watermarking signal, wherein the watermarking signal is a type of signal combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at a plurality of time instances; determining a second set of values of the second set of parameters based on the first set of values; determining a state manager based on the first and second sets of values, wherein the state manager determines states of the cyber-physical system from the monitored output signal; and determining a detector capable of identifying presence of an attack from the states of the cyber-physical system at the plurality of time instances using the watermarking signal. ### Claim 2 (depends on 1) The method of claim 1, wherein the attack comprises replaying a previously recorded output of the cyber-physical system. ### Claim 3 (depends on 1) The method of claim 1, wherein determining the first and second sets of values further comprises: enhancing a set of predetermined values of the first set of parameters based on the initial set of values of the second set of parameters to generate the first set of values; and enhancing the initial set of values of the second set of parameters based on the first set of values to generate the second set of values. ### Claim 4 (depends on 3) The method of claim 3, wherein enhancing a respective set of values further comprises iterating the enhancement until a convergence is reached. ### Claim 5 (depends on 3) The method of claim 3, wherein the generation of the first set of values corresponds to a performance metric for the cyber-physical system; and wherein the generation of the second set of values corresponds to a detection rate for the attack. ### Claim 6 (depends on 1) The method of claim 1, wherein determining the first and second sets of values further comprises: identifying the first set of values of the first set of parameters based on the initial set of values of the second set of parameters, wherein the first set of values is associated with the controller is existing in the cyber-physical system; and enhancing the initial set of values of the second set of parameters based on the identified first set of values to generate the second set of values. ### Claim 7 (depends on 1) The method of claim 1, wherein the state manager includes a Kalman filter for determining the states of the cyber-physical system. ### Claim 8 (depends on 1) The method of claim 1, wherein the detector includes a chi-square detector for detecting the attack. ### Claim 9 (depends on 1) The method of claim 1, further comprising bounding the first set of values of the first set of parameters to a norm indicating that the controller is a stable dynamic feedback controller. ### Claim 10 A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for co-designing a controller and a watermarking signal for a cyber-physical system, the method comprising: determining a first set of values of a first set of parameters indicating operations of the controller based on an initial set of values of a second set of parameters representing the watermarking signal, wherein the watermarking signal is a type of signal combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at a plurality of time instances; determining a second set of values of the second set of parameters based on the first set of values; determining a state manager based on the first and second sets of values, wherein the state manager determines states of the cyber-physical system from the monitored output signal; and determining a detector capable of identifying presence of an attack from the states of the cyber-physical system at the plurality of time instances using the watermarking signal. ### Claim 11 (depends on 10) The non-transitory computer-readable storage medium of claim 10, wherein the attack comprises replaying a previously recorded output of the cyber-physical system. ### Claim 12 (depends on 10) The non-transitory computer-readable storage medium of claim 10, wherein determining the first and second sets of values further comprises: enhancing a set of predetermined values of the first set of parameters based on the initial set of values of the second set of parameters to generate the first set of values; and enhancing the initial set of values of the second set of parameters based on the first set of values to generate the second set of values. ### Claim 13 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein enhancing a respective set of values further comprises iterating the enhancement until a convergence is reached. ### Claim 14 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein the generation of the first set of values corresponds to a performance metric for the cyber-physical system; and wherein the generation of the second set of values corresponds to a detection rate for the attack. ### Claim 15 (depends on 10) The non-transitory computer-readable storage medium of claim 10, wherein determining the first and second sets of values further comprises: identifying the first set of values of the first set of parameters based on the initial set of values of the second set of parameters, wherein the first set of values is associated with the controller existing in the cyber-physical system; and enhancing the initial set of values of the second set of parameters based on the identified first set of values to generate the second set of values. ### Claim 16 (depends on 10) The non-transitory computer-readable storage medium of claim 10, wherein the state manager includes a Kalman filter for determining the states of the cyber-physical system. ### Claim 17 (depends on 10) The non-transitory computer-readable storage medium of claim 10, wherein the detector includes a chi-square detector for detecting the attack. ### Claim 18 (depends on 10) The non-transitory computer-readable storage medium of claim 10, further comprising bounding the first set of values of the first set of parameters to a norm indicating that the controller is a stable dynamic feedback controller. ### Claim 19 A computer system, comprising: a storage device; a processor; a non-transitory computer-readable storage medium storing instructions, which when executed by the processor causes the processor to perform a method for co-designing a controller and a watermarking signal for a cyber-physical system, the method comprising: determining a first set of values of a first set of parameters indicating operations of the controller based on an initial set of values of a second set of parameters representing the watermarking signal, wherein the watermarking signal is a type of signal combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at a plurality of time instances; determining a second set of values of the second set of parameters based on the first set of values; determining a state manager based on the first and second sets of values, wherein the state manager determines states of the cyber-physical system from the monitored output signal; and determining a detector capable of identifying presence of an attack from the states of the cyber-physical system at the plurality of time instances using the watermarking signal. ### Claim 20 (depends on 19) The computer system of claim 19, wherein determining the first and second sets of values further comprises: enhancing a set of predetermined values of the first set of parameters based on the initial set of values of the second set of parameters to generate the first set of values; and enhancing the initial set of values of the second set of parameters based on the first set of values to generate the second set of values.