Vehicle communications bus data security
AssigneeSheeldS Cyber Ltd.
InventorsGil Litichever, Ziv Levi
Life of this patent
Estimating the term…
Abstract
A method of real-time data security of a communications bus, the method comprising the steps of: reading at least an early portion of a message being transmitted over a communications bus, determining whether the message is suspicious, according to at least one rule applied on the read early portion of the message, and upon determining that the message is suspicious, corrupting at least a part of the message.
Claims40
A device for use with multiple Electronic Control Units (ECUs) in a vehicle, the ECUs communicate over a first vehicle bus that comprises a Control Area Network (CAN) bus that transports CAN frames that are composed of first and second parts, where the first part is transmitted to the first vehicle bus before the second part, the device comprising:
- a first connector for connecting to a data source that is distinct from the vehicle bus;
- a first transceiver coupled to the first connector, for transmitting frames to, and for receiving frames from, the data source via the first connector;
- a second connector, for connecting to the first vehicle bus;
- a second transceiver coupled to the second connector, for transmitting frames to, and for receiving frames from, the first vehicle bus via the second connector;
- and
- a software and a processor for executing the software, the processor is coupled to control the first and second transceivers,
- a single enclosure housing the first connector, the second connector, the first transceiver, the second transceiver, and the processor,
- wherein the device is configured to:
- receive from the data source, by the first transceiver via the first connector, a first part of a first frame that is composed of first and second parts;
- transmit to the first vehicle bus, by the second transceiver via the second connector, the received first part of the first frame;
- receive from the data source, by the first transceiver via the first connector, the second part of the first frame that is composed of first and second parts;
- check while receiving the second part, the received first part for compliance with a rule;
- and
- responsive to the first part not complying with the rule, transmit to the first vehicle bus, by the second transceiver via the second connector, data other than the second part of the first frame, for corrupting the first frame on the first vehicle bus, so that the first frame is rendered ineligible to be properly received by at least one of the multiple ECUs connected to the first vehicle bus,
- wherein the corrupting of the second part of the first frame is by changing at least one bit in the second part of the first frame.
Dependencies are inferred from the claim text.