Protection of communication on a vehicular network via a remote security service
AssigneeCheck Point Software Technologies Ltd.
InventorsAlon KANTOR, Tamir Zegman
Life of this patent
Estimating the term…
Abstract
Methods and systems for protecting components of a linked vehicle from cyber-attack are disclosed. These methods and systems comprise elements of hardware and software for receiving a packet; tunneling the packet to a terrestrial-based security service, analyzing whether the packet is harmful to a component in the vehicle, and at least one action to protect at least one component.
Claims14
A method to mitigate a cyber-attack on a linked vehicle, comprising:
- receiving, by a terrestrial-based security service, a packet transmitted to a vehicle;
- analyzing whether the received packet is suspected to be part of a cyber-attack;
- and,
- based on the analysis that the received packet is suspected to be part of a cyber-attack, taking at least one action to protect at least one of the vehicle components.
A method of protecting communications between a linked vehicle and a terrestrial peer, wherein the vehicle and terrestrial peer share a secret key, the method comprising:
- applying an encryption algorithm to data for transmission;
- applying an integrity protection algorithm to data for transmission, to create a cryptographic hash;
- and,
- transmitting the encrypted data and cryptographic hash to the remote peer using a format recognized by the remote peer.
A method for controlling access to network services within a linked vehicle, comprising:
- receiving a packet from a vehicle component;
- inspecting the packet to determine an associated application;
- according to whether the determined associated application was HTTP, determining a requested URL;
- and,
- according to the determined application information, taking an action specified by vehicle policy.
A terrestrial-based computer system to mitigate a cyber-attack on a linked vehicle, comprising:
- a storage medium for storing computer components;
- and,
- a computerized processor for executing the computer components comprising:
- a first computer component for receiving a packet transmitted to a vehicle;
- a second computer component for analyzing whether the received packet is suspected to be part of a cyber-attack;
- and,
- a third computer component for, based on the analysis that the received packet is suspected to be part of a cyber-attack, taking at least one action to protect at least one of the vehicle components.
A computer-usable non-transitory storage medium having a computer program embodied thereon for causing a suitable programmed system to mitigate a cyber-attack on a linked vehicle, by performing the following steps when such program is executed on the system, the steps comprising:
- reception, by a terrestrial-based security service, of a packet transmitted to a vehicle;
- analyzing whether the received packet is suspected to be part of a cyber-attack;
- and,
- based on the analysis that the received packet is suspected to be part of a cyber-attack, taking at least one action to protect at least one of the vehicle components.
Dependencies are inferred from the claim text.