Back to results
US 12,665,878 B2Granted
CANBUS cybersecurity firewall
AssigneesAT&T Intellectual Property I, L.P., AT&T Mobility II LLC
InventorsSteven Adams, Maureen Langevin, Christine Murphy, Toby Avino, John Liefert, William O'Hern, Daniel Sheleheda, Jayaraman Ramachandran
Life of this patent
Estimating the term…
Abstract
A method to create a serial wire speed firewall that can monitor and enforce security policy on a CAN buy network and prevent cyber-attacks.
Claims20
An apparatus comprising:
- a processor;
- and
- memory coupled with the processor, the memory storing executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
- obtaining a Controller Area Network (CAN) bus frame based on a signal on a serial bus of a CAN bus system of a vehicle, wherein the signal is associated with an application, and wherein the CAN bus frame includes sub-frame data elements;
- determining that one or more of the sub-frame data elements in the CAN bus frame corresponds to one or more terms in a policy rule;
- and
- based on the determining, sending an indication of a drop action to be implemented by one or more apparatuses of the CAN bus system, wherein the policy rule specifies that a drop action is to be performed after a threshold number of alert actions have been indicated for CAN bus frames associated with the application within a period of time without any allow actions having been indicated for CAN bus frames associated with the application within that period of time, such that a drop action is not performed if an allow action is indicated for one or more CAN bus frames associated with the application within that period of time.
4 more elements
A method comprising:
- obtaining, by a processing system including a processor, a Controller Area Network (CAN) bus frame based on a signal on a serial bus of a CAN bus system of a vehicle, wherein the signal is associated with an application, and wherein the CAN bus frame includes sub-frame data elements;
- determining, by the processing system, that one or more of the sub-frame data elements in the CAN bus frame corresponds to one or more pre-provisioned terms in a policy rule;
- and
- based on the determining, sending, by the processing system, an indication of a drop action to be implemented by one or more apparatuses of the CAN bus system, wherein the policy rule specifies that a drop action is to be performed after a threshold number of alert actions have been indicated for CAN bus frames associated with the application within a period of time without any allow actions having been indicated for CAN bus frames associated with the application within the period of time, such that a drop action is avoided if an allow action is indicated for one or more CAN bus frames associated with the application within that period of time.
1 more element
A non-transitory computer readable storage medium storing computer executable instructions that when executed by a computing device cause said computing device to effectuate operations comprising:
- deriving a Controller Area Network (CAN) bus frame based on a signal on a serial bus of a CAN bus system of a vehicle, wherein the signal is associated with an application, and wherein the CAN bus frame includes sub-frame data elements;
- determining that one or more of the sub-frame data elements in the CAN bus frame corresponds to one or more terms in a policy rule;
- and
- based on the determining, sending an indication of a drop action to be implemented by one or more apparatuses of the CAN bus system, wherein the policy rule specifies that a drop action is to be performed after a threshold number of alert actions have been indicated for CAN bus frames associated with the application within a period of time without any allow actions having been indicated for CAN bus frames associated with the application within the period of time, such that a drop action is avoided if an allow action is indicated for one or more CAN bus frames associated with the application within that period of time.
1 more element
Dependencies are inferred from the claim text.