Security system for in-vehicle network and method therefor

A security method for an in-vehicle network, the security method comprising:

• transitioning an intrusion detection and prevention system (IDPS) loaded into a gateway from a function off mode to a first monitoring mode when a vehicle starts and detecting an intrusion into a general message and a diagnostic message on the in-vehicle network;
• transitioning from the first monitoring mode to a second monitoring mode and stopping detecting the intrusion into the general message upon receipt of a request to stop transmitting the general message from the outside and detecting the intrusion into the diagnostic message;
• and
• detecting and blocking the general message introduced into the in-vehicle network;
• wherein the security method further comprises transitioning from the second monitoring mode to the first monitoring mode after not receiving a session maintenance request message within a predetermined time in the second monitoring mode or upon receipt of a communication control command to permit transmission of the general message in the second monitoring mode.

A security system for an in-vehicle network, the security system comprising:

• a diagnoser;
• a gateway communicably coupled to the diagnoser and including at least one processor, wherein the at least one processor is configured to:
• transition an intrusion detection and prevention system (IDPS) loaded into the gateway from a function off mode to a first monitoring mode and detect an intrusion into a general message and a diagnostic message on the in-vehicle network;
• transition from the first monitoring mode to a second monitoring mode and stop detecting the intrusion into the general message when there is a request to stop transmitting the general message from outside, and detect the intrusion into the diagnostic message;
• and
• detect and block the general message introduced into the in-vehicle network;
• and
• at least one electronic control unit communicably coupled to the gateway;
• wherein the at least one processor is configured to transition from the second monitoring mode to the first monitoring mode when a session maintenance request message is not received within a predetermined time in the second monitoring mode;
• or
• wherein the at least one processor is configured to transition from the second monitoring mode to the first monitoring mode when a communication control command to permit transmission of the general message from the outside in the second monitoring mode is received.