AUTOMATED VEHICLE INTRUSION DEVICE

• US 20140031005A1
• Filed: 07/30/2012
• Published: 01/30/2014
• Est. Priority Date: 07/30/2012
• Status: Active Grant

• Current Assignee: General Motors LLC (General Motors Company)
• Original Assignee: General Motors LLC (General Motors Company)
• Inventors: Sumcad, Anthony J., Waldner, Matthew R., Doherty, James
• Granted Patent: US 8,868,030 B2
• Time in Patent Office: Days
• US Class Current: 455/405
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04W 12/121 Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/48 for in-vehicle communication

Abstract

A method of identifying abnormal activity within a communication system between one or more vehicles and a wireless carrier system. The method may include receiving a first record from a wireless carrier system or a call center. It may further include automatically receiving a second record from a data logger via a vehicle telematics unit. The second record may be a data upload record and includes information pertaining to a wireless connection that includes an event type (mode) and a call type (mode). The event type may indicate whether the wireless connection was SMS, circuit switched, or packet switched. The call type may indicate a transaction during the wireless connection. The method may include determining the occurrence of an abnormal activity based on the first record and the second record. And the method may also include providing a report.

Claims

1. A method of identifying abnormal activity within a communication system between one or more vehicles and a wireless carrier system, comprising the steps of:

receiving a first record from a wireless carrier system or a call center;

receiving a second record from a data logger via a vehicle telematics unit, wherein the second record is a data upload record and includes information pertaining to a wireless connection,

wherein the wireless connection includes an event type and a call type,

wherein the event type indicates whether the wireless connection was SMS, circuit switched, or packet switched, and wherein the call type indicates a transaction during the wireless connection; and

determining the occurrence of an abnormal activity based on the first record and the second record.

2. The method as defined in claim 1 wherein the data logger has a configurable parameter to automatically trigger the transmission of the data upload record.

3. The method as defined in claim 1 wherein the first record may include archive data or real-time data.

4. The method as defined in claim 3 wherein the archive data is stored on servers maintained by the wireless network system and includes records of individual calls or attempted calls.

5. The method as defined in claim 3 wherein the real-time data includes information pertaining to individual calls or attempted calls.

6. The method as defined in claim 1 wherein the event type further indicates whether a connection request was incoming or outgoing.

7. The method as defined in claim 6 wherein the call types may include:

personal calls, VDU uploads, emergency calls, advisor calls, audio file downloads, general packet data, and crash notifications.

8. The method as defined in claim 7 wherein the data upload record includes an SMS identification (ID) for SMS event types, a phone number for circuit switched event types, and an internet protocol (IP) address for packet switched event types.

9. The method as defined in claim 8 wherein the determining step further comprises flagging at least one wireless connection based upon one or more predetermined permutations of the event type, the call type, or both.

10. The method as defined in claim 9 wherein one predetermined permutation includes an event type that is circuit switched and a call type that is personal calling.

11. The method as defined in claim 9 wherein one predetermined permutation includes an event type that is packet switched and an IP address that is not associated with the call center.

12. The method as defined in claim 9 wherein one predetermined permutation includes an event type that is packet switched and vehicle outgoing and a call type that is personal calling.

13. The method as defined in claim 1 wherein the data upload record further includes connection retry information, wherein the connection retry information indicates whether a retry sequence was exhausted.

14. The method as defined in claim 13 wherein the determining step further comprises flagging at least one wireless connection based upon an exhausted retry sequence.

15. The method as defined in claim 4 wherein the first record includes event type, call type, and global positioning satellite (GPS) data from a plurality of vehicles interacting with one or more wireless carrier systems.

16. The method as defined in claim 15 wherein the second record includes GPS data.

17. The method as defined in claim 16 wherein the first record and the second record are used to determine a source of abnormal activity.

18. The method as defined in claim 17 wherein the source is a wireless carrier system attack.

19. The method as defined in claim 13 wherein the source is a gap in the service provided by one or more wireless carrier systems.

20. A method of identifying abnormal activity within a communication system between one or more vehicles and a wireless carrier system, comprising the steps of:

receiving an archive data from a wireless carrier system;

automatically receiving a data upload record from a data logger via a vehicle telematics unit, wherein the second record is a data upload record and includes information pertaining to a wireless connection,

wherein the wireless connection includes an event type and a call type,

wherein the event type indicates whether the wireless connection was SMS, circuit switched, or packet switched, and wherein the event type further indicates whether a connection request was incoming or outgoing,

and wherein the call type indicates a transaction during the wireless connection;

determining the occurrence of an abnormal activity based on the first record and the second record; and

providing a report based upon the determination.