US 12,598,075 B2 · Detection and survival method against adversarial attacks on automated systems

Abstract

Methods provide device authentication for an intrusion detection system implementing building automation and control network (BACnet) Master-Slave/Token-Passing (MS/TP). An authentication protocol provides countermeasures to vulnerabilities in the BACnet MS/TP physical layer by utilizing an extended message format to cloak device identifiers (IDs). Adversaries are prevented from using known device IDs to gain access to the network. An authenticating device hashes a device identifier of a device to be authenticated combined with a random number. The authenticating device receives a hash of the random number plus the device identifier from the device. The authenticating device compares the hashes and authenticates the device if the hashes match. To transmit the hash, the BACnet MS/TP frame format includes an extended header cyclic redundancy check (CRC) field having bytes reallocated from the data field of the frame format. Another countermeasure utilizes a physical unclonable function (PUF) of the device in the extended header CRC.

Claims15

Dependent claims

A method of authenticating a device on a building automation and control master-slave/token-passing (BACnet MS/TP) network, the method comprising:

receiving, by a processor of an authenticating device, a device identifier of the device;
generating, by the processor, a random number;
transmitting, by the processor, the random number to the device;
receiving, by the processor, a first hash of a combination of the random number and the device identifier from the device;
calculating, by the processor, a second hash of the combination of the random number and the device identifier;
comparing, by the processor, the first hash to the second hash;
and
authenticating, by the processor, the device that provided the first hash equal to the second hash,
wherein the first hash is communicated over the BACnet MS/TP network in a BACnet MS/TP message having a frame format comprising a header cyclic redundancy check (CRC) field extended in length by additional bytes to accommodate the length of the first hash, the additional bytes reallocated from the length of a data field of the frame format.

6 more elements

A system for device authentication on a building automation and control master-slave/token-passing (BACnet MS/TP) network, the system comprising:

a first device comprising a first processor and a first memory storing computer-executable instructions that, when executed by the first processor, causes the first device to:
receive a device identifier of a second device;
generate a random number;
transmit the random number to the second device;
receive a first hash of a first combination of the random number and the device identifier from the second device;
calculate a second hash of a second combination of the random number and the device identifier;
compare the first hash to the second hash;
and
authenticate the second device that provided the first hash equal to the second hash;
and
a second device comprising a second processor and a second memory storing computer-executable instructions that, when executed by the second processor, causes the second device to:
transmit the device identifier of the second device to the first device;
receive the random number from the first device;
generate the first hash of the second combination of the random number and the device identifier;
and
transmit the first hash to the first device,
wherein the first hash is communicated over the BACnet MS/TP network in a BACnet MS/TP message having a frame format comprising a header cyclic redundancy check (CRC) field extended in length by additional bytes to accommodate the length of the first hash, the additional bytes reallocated from the length of a data field of the frame format.

14 more elements

Dependencies are inferred from the claim text.

Detection and survival method against adversarial attacks on automated systems

Life of this patent

Detection and survival method against adversarial attacks on automated systems

Life of this patent

Abstract

Claims15