Back to results
US 2020/0351276 A1Published application
Communications bus signal fingerprinting
AssigneeCylance Inc.
InventorsDonald Bathurst, Mark Carey
Life of this patent
Estimating the term…
Abstract
Systems are provided herein for communications bus signal fingerprinting. A security module monitors a plurality of voltage lines of at least one electronic control unit (ECU) electrically coupled to a communications bus. A voltage differential across at least two of the plurality of voltage lines of the at least one ECU is measured. The voltage differential is compared to a plurality of predetermined signal fingerprints associated with the at least one ECU. A variance in the compared voltage differential is identified relative to one or more of the plurality of predetermined signal fingerprints. Data characterizing the identified variance is provided.
Claims20
A system comprising:
- a first security zone comprising a first data processor and a second security zone comprising a second data processor, wherein each of the first data processor and the second data processor are configured to execute operations comprising:
- monitoring a plurality of voltage lines of a first electronic control unit (ECU) and a second ECU, wherein each ECU is electrically coupled to a communications bus;
- measuring voltage differentials across at least two of the plurality of voltage lines of the first ECU and at least two of the plurality of voltage lines of the second ECU;
- comparing each voltage differential to a plurality of predetermined signal fingerprints associated with the first ECU and the second ECU, the plurality of predetermined signal fingerprints representing various voltages over time that characterize nominal operation of the first ECU and the second ECU;
- identifying, based on the comparing, a variance in at least one of the compared voltage differentials relative to one or more of the plurality of predetermined signal fingerprints, the variance identifying whether signal transmissions on at least one of the plurality of voltage lines has been compromised;
- providing data characterizing the identified variance;
- and
- an encryption device configured to encrypt the data characterizing the identified variance, wherein the encrypted data identifies an origination security zone of the data as either the first security zone or the second security zone based on which of the at least one of the first data processor or the second data processor identifies the variance.
5 more elements
A system comprising:
- a first security zone comprising a first data processor and a second security zone comprising a second data processor, wherein each of the first data processor and the second data processor are configured to execute operations comprising:
- measuring a first voltage line of a first electronic control unit (ECU) and a second ECU during an imprint mode of the first security module and the second security module;
- determining a first signal fingerprint associated with the first ECU and a second signal fingerprint associated with the second ECU over time by comparing (i) the measured first voltage line to a first ideal voltage associated with the first measured voltage line and (ii) the measured second voltage line to a second ideal voltage associated with the second measured voltage line;
- and
- providing data characterizing the first signal fingerprint and the second signal fingerprint, each signal fingerprint representing various voltages over time that characterize nominal operation of the first ECU and the second ECU;
- an encryption device configured to encrypt the data comprising the first signal fingerprint and the second fingerprint, wherein the encrypted data identifies an origination security zone of the data as the first security zone for the first signal fingerprint and the second security zone for the second signal fingerprint;
- and
- a communications bus coupled to the first security zone and the second security zone.
5 more elements
A system comprising:
- means for monitoring a plurality of voltage lines of a first electronic control unit (ECU) and a second ECU, wherein each ECU is electrically coupled to a communications bus;
- means for measuring voltage differentials across at least two of the plurality of voltage lines of the first ECU and at least two of the plurality of voltage lines of the second ECU;
- means for comparing each voltage differential to a plurality of predetermined signal fingerprints associated with the first ECU and the second ECU, the plurality of predetermined signal fingerprints representing various voltages over time that characterize nominal operation of the first ECU and the second ECU;
- means for identifying, based on the comparing, a variance in at least one of the compared voltage differentials relative to one or more of the plurality of predetermined signal fingerprints, the variance identifying whether signal transmissions on at least one of the plurality of voltage lines has been compromised;
- means for providing data characterizing the identified variance;
- and
- means for encrypting the data characterizing the identified variance, wherein the encrypted data identifies an origination security zone of the data as either the first security zone or the second security zone based on which of the at least one of the first data processor or the second data processor identifies the variance.
4 more elements
Dependencies are inferred from the claim text.