METHOD FOR HANDLING CASE OF DETECTING UNAUTHORIZED FRAME TRANSMITTED OVER ONBOARD NETWORK

• US 20160373449A1
• Filed: 08/29/2016
• Published: 12/22/2016
• Est. Priority Date: 01/20/2015
• Status: Active Grant

• Current Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Inventors: HAGA, TOMOYUKI, MATSUSHIMA, HIDEKI, UJIIE, YOSHIHIRO, KISHIKAWA, TAKESHI
• Granted Patent: US 10,328,874 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B60R 16/023 for transmission of signals between vehicle parts or subsystems
• CPC Class Codes: G08G 1/0965 responding to signals from another vehicle, e.g. emergency vehicle
• CPC Class Codes: G08G 1/162 event-triggered
• CPC Class Codes: G08G 1/22 Platooning, i.e. convoy of communicating vehicles
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 4/46 for vehicle-to-vehicle communication [V2V]

Abstract

An anomaly handling method that suitably handles a case where the possibility of a vehicle being unauthorizedly controlled so as to suppress the effects thereof is provided. In an anomaly handling method used in one or a plurality of electronic control units installed in one vehicle, an inter-vehicle communication message transmitted from a device installed in the other vehicle is received as an anomaly detection notification, the anomaly detection notification being issued when an unauthorized frame is detected on an onboard network installed in another vehicle, and an anomaly handling processing is selected from a plurality of predetermined anomaly handling processing in accordance with the received content to transition to a safe state for example, and the selected anomaly handling processing is executed.

Claims

1. An anomaly handling method used in one or a plurality of electronic control units (ECUs) installed in one vehicle, the anomaly handling method comprising:

receiving an anomaly detection notification transmitted from a device installed in another vehicle, the anomaly detection notification being issued when an unauthorized frame is detected in an onboard network which is installed in the another vehicle;

selecting an anomaly handling process from a plurality of predetermined anomaly handling processes in accordance with the received anomaly detection notification; and

executing the selected anomaly handling process.

2. The anomaly handling method according to claim 1, wherein the anomaly detection notification includes level information indicating one of a plurality of levels, and

wherein in the selecting, selecting the anomaly handling process in accordance with the level that the level information included in the anomaly detection notification indicates.

3. The anomaly handling method according to claim 2, wherein in the selecting, (i)selecting the anomaly handling process by referencing handling information where each of the plurality of predetermined anomaly handling processes is correlated with each of the plurality of levels, and (ii)selecting the anomaly handling process corresponding to the handling information by the level indicated by the level information included in the anomaly detection notification.

4. The anomaly handling method according to claim 3, wherein each of the plurality of anomaly handling processes includes at least one of (i)control to stop traveling of the one vehicle, (ii)control to cause the vehicle to proceed slowly, (iii)control for the vehicle to maintain inter-vehicle distance as to a vehicle ahead within a certain range, and (iv)control to notify the driver of the vehicle.

5. The anomaly handling method according to claim 2, further comprising determining whether or not a predetermined condition is satisfied based on contents of the anomaly detection notification, and in case that in the determining, determining the predetermined condition is satisfied, in the transmitting, transmitting the anomaly detection notification externally from the one vehicle, and in case that the predetermined condition is not satisfied, in the transmitting, not transmitting the anomaly detection notification.

6. The anomaly handling method according to claim 5, wherein the anomaly detection notification includes condition information indicating a condition for transfer,

and wherein, in case that the condition for transfer is satisfied, in the determining, determining the predetermined condition is satisfied, and in case that the condition for transfer that the condition information indicates has not been satisfied, in the determining, determining the predetermined condition is not satisfied.

7. The anomaly handling method according to claim 5, wherein the anomaly detection notification includes position information indicating a position measured regarding the other vehicle in which is installed the device that detects the unauthorized frame and transmits the anomaly detection notification,

and wherein the predetermined condition is a condition that the position measured regarding the one vehicle and the position indicated by the position information included in the anomaly detection notification are within a predetermined range.

8. The anomaly handling method according to claim 5, wherein the anomaly detection notification includes count information indicating a count,

wherein the predetermined condition is a condition that a count of transfer performed from the device that detects the unauthorized frame and transmits the anomaly detection notification until receiving the anomaly detection notification therefrom is smaller than a predetermined count,

wherein in the determining, determining whether or not the predetermined condition is satisfied, based on the count information included in the anomaly detection notification,

and wherein in the transmitting, transmitting with updating the count information at the time of transmitting the anomaly detection notification.

9. The anomaly handling method according to claim 5, wherein the anomaly detection notification includes clock time information indicating clock time,

and wherein the predetermined condition is a condition that the elapsed time from a clock time indicated by the clock time information is shorter than a predetermined time.

10. The anomaly handling method according to claim 5, wherein, at the time of transmitting the anomaly detection notification, in the transmitting, transmitting with updating the level information included in the anomaly detection notification based on a predetermined level changing rule.

11. An anomaly handling method that handles unauthorized situations by performing communication among first and second vehicles, the anomaly handling method comprising:

transmitting from a device installed in the first vehicle an anomaly detection notification at the time of detecting an unauthorized frame in an onboard network installed in the first vehicle; and

receiving the anomaly detection notification by one or a plurality of electronic control units installed in the second vehicle receive, selecting anomaly handling process from a plurality of predetermined anomaly handling processes in accordance with the received anomaly detection notification, and executing the selected anomaly handling process.

12. The anomaly handling method according to claim 11, wherein, when the unauthorized frame is detected, the device installed in the first vehicle performs the transmission including in the anomaly detection notification level information indicating one level selected base on, of the plurality of levels predetermined by dividing frame IDs, the frame ID of the unauthorized frame,

and wherein the one or plurality of electronic control units installed in the second vehicle perform the selection of anomaly handling process in accordance with the level indicated by the level information included in the anomaly detection notification.

13. An anomaly handling method used by an electronic control unit (ECU) connected to an onboard network installed in one vehicle, the anomaly handling method comprising:

transmitting an anomaly detection notification to another vehicle, the anomaly detection notification being issued in case that an unauthorized frame is detected in the vehicle network installed in the one vehicle.

14. An electronic control unit comprising:

a processor; and

memory having a program stored therein, the program causing the processor to execute operations including

receiving an anomaly detection notification transmitted from a device installed in another vehicle, the anomaly detection notification being issued when an unauthorized frame is detected in an onboard network which is installed in the another vehicle;

selecting an anomaly handling process from a plurality of predetermined anomaly handling processes in accordance with the received anomaly detection notification; and

executing the selected anomaly handling process.

15. An electronic control unit connected to an onboard network, the electronic control unit comprising:

a processor; and

memory having a program stored therein, the program causing the processor to execute operations including

detecting unauthorized frames transmitted in the onboard network, and

transmitting an anomaly detection notification to a different vehicle from the vehicle in which is installed the own unit, in case that an unauthorized frame is detected.