Back to results
US 12,771,705 B2Granted
Intrusion detection for connected vehicles
AssigneeMubin Pagarkar
InventorMubin Pagarkar
Life of this patent
Estimating the term…
Abstract
The present disclosure generally relates to intrusion detection systems for connected vehicles. In some embodiments, a telemetric device that listens to messages transmitted via a controller area network (CAN) bus is described. In some embodiments, the telemetric device is connected to an on-board diagnostic port. In some embodiments, the telemetric device sends an alert when one or more anomalies are present in one or more messages transmitted via the CAN bus.
Claims15
A telematic device connected to an on-board diagnostic port of a vehicle, comprising:
- one or more processors;
- and
- memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for:
- receiving, via the on-board diagnostic port of the vehicle, one or more messages transmitted via a controller area network (CAN) bus;
- processing the one or more messages to detect whether one or more anomalies are present, including:
- retrieving data from a database updated using a Convolutional Neural Network (CNN) to detect a first set of one or more events and a machine learning model to detect a second set of one or more events;
- and
- using the one or more messages and the data from the database to identify whether one or more anomalies are present;
- and
- in response to a determination that an anomaly is detected, sending, to the vehicle, an alert based on the anomaly, wherein the alert causes the vehicle to perform an action in response to the anomaly, wherein the vehicle is a first vehicle that is connected to a cloud service provider, and wherein the database is updated in real-time based on one or more events occurring at a second vehicle that is connected to the cloud service provider and different from the first vehicle.
7 more elements
A non-transitory computer-readable storage medium storing one or more programs configured to be executed by one or more processors, the one or more programs including instructions for
- receiving, via an on-board diagnostic port of the vehicle, one or more messages transmitted via a controller area network (CAN) bus;
- processing the one or more messages to detect whether one or more anomalies are present, including:
- retrieving data from a database updated using a Convolutional Neural Network (CNN) to detect a first set of one or more events and a machine learning model to detect a second set of one or more events;
- and
- using the one or more messages and the data from the database to identify whether one or more anomalies are present;
- and
- in response to a determination that an anomaly is detected, sending, to the vehicle, an alert based on the anomaly, wherein the alert causes the vehicle to perform an action in response to the anomaly, wherein the vehicle is a first vehicle that is connected to a cloud service provider, and wherein the database is updated in real-time based on one or more events occurring at a second vehicle that is connected to the cloud service provider and different from the first vehicle.
4 more elements
A method, comprising:
- at a telematic device that is connected to an on-board diagnostic port of a vehicle:
- receiving, via the on-board diagnostic port of the vehicle, one or more messages transmitted via a controller area network (CAN) bus;
- processing the one or more messages to detect whether one or more anomalies are present, including:
- retrieving data from a database updated using a Convolutional Neural Network (CNN) to detect a first set of one or more events and a machine learning model to detect a second set of one or more events;
- and
- using the one or more messages and the data from the database to identify whether one or more anomalies are present;
- and
- in response to a determination that an anomaly is detected, sending, to the vehicle, an alert based on the anomaly, wherein the alert causes the vehicle to perform an action in response to the anomaly, wherein the vehicle is a first vehicle that is connected to a cloud service provider, and wherein the database is updated in real-time based on one or more events occurring at a second vehicle that is connected to the cloud service provider and different from the first vehicle.
5 more elements
Dependencies are inferred from the claim text.