SYSTEM AND METHOD FOR DETECTING OBD-II CAN BUS MESSAGE ATTACKS
First Claim
1. A method for detecting security attacks against a vehicle via the vehicle'"'"'s OBD-II port, the method comprising:
- at an OBD-II CAN message screening system, wherein the OBD-II CAN message screening system is electrically coupled to the vehicle via the OBD-II port;
establishing an OBD-II CAN inbound message whitelist;
in response to receiving an inbound CAN message command from a device external to the vehicle, updating statistics of the inbound CAN message command and comparing the inbound CAN message command with the OBD-II CAN message whitelist; and
forwarding the inbound CAN message command to the vehicle via the vehicle'"'"'s OBD-II port when the inbound CAN message command appears in the OBD-II CAN message whitelist.
1 Assignment
0 Petitions
Accused Products
Abstract
The present application discloses method and system for detecting potential security attacks against a vehicle networking through an OBD-II port. The system establishes an inbound OBD-II CAN message whitelist and an outbound OBD-II CAN message blacklist, respectively. Upon receipt of a CAN message command, the system updates statistics for the command and determines whether the command is inbound or outbound. In response to an inbound command from a device external to the vehicle, the system compares the inbound command with the whitelist and forwards the inbound CAN message command to the vehicle via the vehicle'"'"'s OBD-II port when inbound command appears in the whitelist. In response to an outbound CAN message command from the vehicle, the system compares the outbound command with the blacklist and prevents the outbound command from being sent to an external vehicle via the vehicle'"'"'s OBD-II port when the outbound command appears in the blacklist.
72 Citations
17 Claims
-
1. A method for detecting security attacks against a vehicle via the vehicle'"'"'s OBD-II port, the method comprising:
at an OBD-II CAN message screening system, wherein the OBD-II CAN message screening system is electrically coupled to the vehicle via the OBD-II port; establishing an OBD-II CAN inbound message whitelist; in response to receiving an inbound CAN message command from a device external to the vehicle, updating statistics of the inbound CAN message command and comparing the inbound CAN message command with the OBD-II CAN message whitelist; and forwarding the inbound CAN message command to the vehicle via the vehicle'"'"'s OBD-II port when the inbound CAN message command appears in the OBD-II CAN message whitelist. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
10. A OBD-II CAN message screening system comprising:
-
an MCU, that is electrically coupled to an CAN message processing module, a communication module, a command statistics module, and an inbound OBD-II CAN message whitelist, respectively, to transmit signals between them; wherein; the MCU is configured to transmit an inbound OBD-II CAN message command received by the communication module to the CAN message processing module and the command statistic module, respectively; the command statistic module is configured to update statistics of the inbound CAN message command and report the updated statistics to the MCU; the CAN message processing module is configured to determine whether the inbound OBD-II CAN message command appears in the inbound OBD-II CAN message whitelist and report the determination to the MCU; and the MCU is configured to forward the inbound OBD-II CAN message command to a vehicle coupled to the OBD-II CAN message screening system via an OBD port in accordance with the determination and the updated statistics. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17)
-
Specification