Vehicle security system
AssigneeKarma Automotive LLC
InventorBrian Green
Life of this patent
Estimating the term…
Abstract
A security system for a vehicle network of a vehicle is provided. The vehicle network includes a gateway and domain controllers for specific areas of the vehicle. The security system may validate messages sent from the gateway. The security system may also utilize split decryption keys in order to decrypt messages in the vehicle network. The security system may also utilize asymmetrical encryption keys in order to secure data within the vehicle network.
Claims14
A computer-implemented method when executed on a processor of a domain controller of a vehicle network for a vehicle causes the processor to perform operations comprising:
- receiving, from a gateway of the vehicle network that is in communication with the domain controller, a first message and a second message, the first message received via one of a CAN bus or a first Ethernet connection and the second message received via the other one of the CAN bus or the first Ethernet connection;
- determining that the first message and the second message match by determining that the first message and the second message contain identical data;
- determining that the first message and the second message are received within a designated period;
- based on determining that the first message and the second message match and are received within the designated period, processing the first message and the second message to control elements of a vehicle network;
- and transmitting, from the domain controller, via an additional CAN bus, a third message to another domain controller of the vehicle network, wherein the domain controller and the another domain controller are each configured to control a different respective system of the vehicle.
The computer-implemented method 1, wherein the operations further comprise:
- determining that the first message and the second message match,
- wherein processing the first message and the second message to control elements of the vehicle network is further based on determining that the first message and the second message match.
A computer-implemented method when executed on a processor of a domain controller of a vehicle network causes the processor to perform operations comprising:
- receiving a first message from a gateway of the vehicle network via one of a CAN bus or an Ethernet connection, the first message comprising a first portion of an authentication key;
- receiving a second message from the gateway via the other one of the CAN bus or the Ethernet connection, the second message comprising a second portion of the authentication key;
- determining that the first message comprises the first portion of the authentication key and that the second message comprises the second portion of the authentication key;
- and
- based on the first message comprising the first portion of the authentication key and the second message comprising the second portion of the authentication key, decrypting the first message and the second message.
Dependencies are inferred from the claim text.