Secure message filtering to vehicle electronic control units with secure provisioning of message filtering rules

A method, comprising:

• configuring a host processor to receive a message filtering rule, said host processor associated with a vehicle;
• configuring a bus controller to verify authenticity of said message filtering rule, wherein said bus controller is programmed through an interface, said interface inaccessible from said host processor;
• filtering messages from said host processor using said verified message filtering rule, wherein said filtering is performed by said bus controller;
• and
• transmitting said filtered messages from said bus controller over a bus to one or more ECUs, said ECUs communicatively coupled to said bus.

A method, comprising:

• receiving a message filtering rule from a rule authoring entity;
• receiving a digital signature associated with said message filtering rule, wherein said digital signature verifies identity of said rule authoring entity as a trusted source;
• generating a trusted manifest associated with said message filtering rule based on said digital signature;
• and
• providing said trusted manifest to said rule authoring entity, such that said rule authoring entity associates said trusted manifest with said message filtering rule for transmission to a host processor associated with a vehicle.

A non-transitory computer-readable storage medium having instructions stored thereon which when executed by a processor result in the following operations comprising:

• receiving a message filtering rule on a host processor, said host processor associated with a vehicle;
• verifying authenticity of said message filtering rule on a bus controller, wherein said bus controller is programmed through an interface, said interface inaccessible from said host processor;
• filtering messages from said host processor using said verified message filtering rule, wherein said filtering is performed by said bus controller;
• and
• transmitting said filtered messages from said bus controller over a bus to one or more ECUs, said ECUs communicatively coupled to said bus.