Need based controller area network bus authentication

• US 10,243,941 B2
• Filed: 11/01/2016
• Issued: 03/26/2019
• Est. Priority Date: 11/01/2016
• Status: Active Grant

• Current Assignee: Denso International America Incorporated (DENSO Corporation)
• Original Assignee: Denso International America Incorporated (DENSO Corporation)
• Inventors: Bima, Michael
• Primary Examiner(s): Avery, Jeremiah L
• Application Number:
  US15/340,323
• Publication Number:
  US 20180124030A1
• Time in Patent Office: 875 Days
• Field of Search: None
• CPC Class Codes: H04L 12/40006 Architecture of a communication node current supply arrangements H04L12/10; intermediate storage or scheduling H04L49/90
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/48 for in-vehicle communication

Abstract

Systems and methods are provided and include a control module that receives a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus. The control module determines whether the communication packet from the communication node indicates that the vehicle sensor or the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating range. The control module sends an authentication message to the communication node in response to the communication packet indicating that the vehicle sensor or vehicle system is operating outside of the predetermined acceptable operating range. The control module determines whether a valid authentication code is received from the communication node and performs a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

Claims

1. A system comprising:

a control module configured to;

receive a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus;

determine whether the communication packet from the communication node indicates that the at least one of the vehicle sensor and the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating parameters of the sensor;

send an authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor;

determine whether a valid authentication code is received from the communication node in response to the authentication message; and

perform a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

2. The system of claim 1 wherein the remedial action includes ending communication between the control module and the communication node.

3. The system of claim 1 wherein the remedial action includes generating a notification for a potential attack warning.

4. The system of claim 1 wherein the control module triggers an out of range warning in response to the valid authentication code being received from the communication node and to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor.

5. The system of claim 1 wherein the control module includes a lookup table of the predetermined acceptable operating parameters of the sensors for each of the at least one of the vehicle sensor and the vehicle system.

6. The system of claim 1 wherein the control module sends an initial authentication message to the communication node in response to a vehicle associated with the communication node being powered on.

7. The system of claim 1 wherein the control module sends the authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor by a threshold value.

8. The system of claim 1 wherein the control module maintains a count of occurrences for the communication node, wherein the count of occurrences is incremented each time the at least one of the vehicle sensor and the vehicle system exceeds the predetermined acceptable operating parameters of the sensor by a threshold value.

9. The system of claim 8 wherein the control module sends the authentication message to the communication node in response to the count of occurrences for the at least one of the vehicle sensor and the vehicle system exceeding a threshold count.

10. The system of claim 8 wherein the control module selectively performs the remedial action in response to the count of occurrences exceeding a threshold count.

11. A method comprising:

receiving, with a control module, a communication packet from a communication node that includes at least one of a vehicle sensor and a vehicle system via a controller area network bus;

determining, with the control module, whether the communication packet from the communication node indicates that the at least one of the vehicle sensor and the vehicle system associated with the communication node is operating outside of a predetermined acceptable operating parameters of the sensor;

sending, with the control module, an authentication message to the communication node via the controller area network bus in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor;

determining, with the control module, whether a valid authentication code is received from the communication node in response to the authentication message; and

performing, with the control module, a remedial action for the communication node in response to the valid authentication code not being received from the communication node.

12. The method of claim 11 wherein the remedial action includes ending communication between the control module and the communication node.

13. The method of claim 11 wherein the remedial action includes generating a notification for a potential attack warning.

14. The method of claim 11 further comprising triggering, with the control module, an out of range warning in response to the valid authentication code being received from the communication node and to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor.

15. The method of claim 11 wherein the control module includes a lookup table of the predetermined acceptable operating parameters of the sensors for each of the at least one of the vehicle sensor and the vehicle system.

16. The method of claim 11 further comprising sending, with the control module, an initial authentication message to the communication node in response to a vehicle associated with the communication node being powered on.

17. The method of claim 11 further comprising sending, with the control module, the authentication message to the communication node in response to the communication packet indicating that the at least one of the vehicle sensor and the vehicle system is operating outside of the predetermined acceptable operating parameters of the sensor by a threshold value.

18. The method of claim 11 further comprising maintaining, with the control module, a count of occurrences for the communication node, wherein the count of occurrences is incremented each time the at least one of the vehicle sensor and the vehicle system exceeds the predetermined acceptable operating parameters of the sensor by a threshold value.

19. The method of claim 18 further comprising sending, with the control module, the authentication message to the communication node in response to the count of occurrences for the at least one of the vehicle sensor and the vehicle system exceeding a threshold count.

20. The method of claim 18 further comprising performing, with the control module, the remedial action in response to the count of occurrences exceeding a threshold count.