Back to results
US 9,288,048 B2Granted
Real-time frame authentication using ID anonymization in automotive networks
AssigneeThe Regents of the University of Michigan
InventorsKyu Suk Han, Swapna Divya Potluri, Kang G. Shin
Life of this patent
Estimating the term…
Abstract
A real-time frame authentication protocol is presented for in-vehicle networks. A frame identifier is made anonymous to unauthorized entities but identifiable by the authorized entities. Anonymous identifiers are generated on a per-frame basis and embedded into each data frame transmitted by a sending ECU. Receiving ECUs use the anonymous identifiers to filter incoming data frames before verifying data integrity. Invalid data frame are filtered without requiring any additional run-time computations.
Claims20
A computer-implemented method for authenticating data frames sent in a vehicle network of a vehicle, comprising:
- storing, by a receiving electronic control unit, a cryptographic key, where the cryptographic key is shared with a sending electronic control unit and the receiving electronic control unit is implemented on a hardware microprocessor;
- receiving, by the receiving electronic control unit, a current frame identifier in a data frame sent via a serial data link by the sending electronic control unit;
- generating, by the receiving electronic control unit, a next frame identifier in response to receiving the current frame identifier, where the next frame identifier is derived in part from the current frame identifier and the cryptographic key using an encoding function;
- storing, by the receiving electronic control unit, the next frame identifier in a data store for subsequent processing;
- receiving, by the receiving electronic control unit, another data frame subsequently to receiving the current frame identifier;
- extracting, by the receiving electronic control unit, a frame identifier from the another data frame without decoding any portion of the another data frame;
- comparing, by the receiving electronic control unit, the extracted frame identifier to the next frame identifier residing in the data store;
- processing, by the receiving electronic control unit, payload of the another data frame when the extracted frame identifier matches the next frame identifier;
- and
- discarding, by the receiving electronic control unit, the another data frame when the extracted frame identifier does not match the next frame identifier, wherein the data frame and the next frame are transmitted according to the priority specified in their frame identifiers.
7 more elements
A system for authenticating data frames sent in a vehicle network of a vehicle, comprising:
- a hardware processor implementing a receiving electronic control unit including:
- a cryptographic key residing in a data store of the receiving electronic control unit, where the cryptographic key is shared with a sending electronic control unit;
- a next frame identifier residing in a data store of the receiving electronic control unit;
- a filter configured to receive a data frame sent via a vehicle network by the sending electronic control unit, the filter extracts a frame identifier from the received data frame without decoding any portion of the data frame and compares the extracted frame identifier with the next frame identifier;
- a message authenticator configured to receive the data frame from the filter and process payload of the data frame when the extracted frame identifier matches the next frame identifier;
- and
- an ID generator configured to receive the extracted frame identifier and, when the extracted frame identifier matches the next frame identifier, generate a new frame identifier and replace the next frame identifier in the data store with the new frame identifier, where the new frame identifier is derived in part from the extracted frame identifier and the cryptographic key using an encoding function and the data frame and the next frame are transmitted according to the priority specified in their frame identifiers,
- wherein the filter, the message authenticator and the ID generator are implemented by the receiving electronic control unit.
5 more elements
A system for authenticating data frames in a vehicle network of a vehicle, comprising:
- a sending electronic control unit coupled to a vehicle network and implemented by a hardware processor, the sending electronic control unit including:
- a send data store that stores a next frame identifier;
- a send module configured to retrieve the next frame identifier from the send data store, format a data frame with the next frame identifier and transmit the data frame over the vehicle network;
- an ID generator configured to retrieve the next frame identifier from the send data store, generate a new frame identifier based in part on the next frame identifier and replace the next frame identifier residing in the send data store with the new frame identifier;
- and
- a receiving electronic control unit coupled to the vehicle network and implemented by a hardware processor, the receiving electronic control unit including:
- a receive data store that stores the next frame identifier;
- a filter configured to receive the data frame sent via the vehicle network by the sending electronic control unit, extract the next frame identifier from the received data frame without decoding any portion of the data frame and compare the extracted frame identifier with the next frame identifier residing in the receive data store;
- a message authenticator configured to receive the data frame from the filter and process payload of the data frame when the extracted frame identifier matches the next frame identifier residing in the receive data store;
- and
- an ID generator interfaced with the message authenticator and configured to generate a new frame identifier and replace the next frame identifier in the receive data store with the new frame identifier when the extracted frame identifier matches the next frame identifier residing in the receive data store wherein the data frame and the next frame are transmitted according to the priority specified in their frame identifiers.
8 more elements
Dependencies are inferred from the claim text.