Vehicle Network Communication Protection

• US 20170327080A1
• Filed: 05/12/2016
• Published: 11/16/2017
• Est. Priority Date: 05/12/2016
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Weinfurther, James M., Paton, Eric Ramsay, Caushi, Aldi, Boran, Lisa T.
• Granted Patent: US 9,868,418 B2
• Time in Patent Office: Days
• CPC Class Codes: B60R 25/1001 Alarm systems associated with another car fitting or mechanism, e.g. door lock or knob, pedals features related to the general power supply B60R25/1018
• CPC Class Codes: G08B 13/22 Electrical actuation
• CPC Class Codes: G08B 15/00 Identifying, scaring or incapacitating burglars, thieves or intruders, e.g. by explosives
• CPC Class Codes: G08B 25/008 Alarm setting and unsetting, i.e. arming or disarming of the security system

Abstract

A vehicle includes a gateway controller configured to interface a diagnostic port to a vehicle communication network. In response to a perimeter alarm system being in an armed state, transfer of messages from the diagnostic port to the vehicle communication network is inhibited. A change session diagnostic request received from the diagnostic port is transferred to the vehicle communication network in response to vehicle speed being less than a threshold and an ignition switch begin in a run position. The transfer of the change session diagnostic request is otherwise inhibited unless intended for a module designated for reprogramming keys.

Claims

1. A vehicle comprising:

a diagnostic port; and

a gateway controller, electrically connected to the diagnostic port and a vehicle network, configured to interface the diagnostic port to the vehicle network and programmed to, in response to an ignition switch being in an off position and a perimeter alarm being armed, inhibit transferring messages received from the diagnostic port to the vehicle network.

2. The vehicle of claim 1 wherein the gateway controller is further programmed to, in response to the perimeter alarm not being armed and receiving a change session diagnostic request from the diagnostic port in a presence of a signal indicative of vehicle speed being greater than a predetermined threshold, inhibit transferring the change session diagnostic request to the vehicle network.

3. The vehicle of claim 1 wherein the gateway controller is further programmed to, in response to the perimeter alarm not being armed and receiving a change session diagnostic request from the diagnostic port in a presence of a signal indicative of an ignition switch not being in a run position, inhibit transferring the change session diagnostic request to the vehicle network.

4. The vehicle of claim 1 wherein the gateway controller is further programmed to, in response to inhibiting transfer of messages received from the diagnostic port to the vehicle network and receiving a message via the diagnostic port, trigger activation of the perimeter alarm.

5. The vehicle of claim 1 wherein the gateway controller is further programmed to, in response to receiving a diagnostic message with a destination address of a controller that programs keys from the diagnostic port in a presence of conditions for inhibiting transferring of messages, transfer the diagnostic message to the vehicle network.

6. The vehicle of claim 1 wherein the gateway controller is further programmed to output a response message via the diagnostic port in response to inhibiting transferring messages to the vehicle network.

7. A gateway controller for a vehicle comprising:

a microprocessor system configured to interface a diagnostic port to a vehicle network and programmed to, in response to an ignition switch being in an off position and a vehicle perimeter alarm being armed, inhibit transferring messages received from the diagnostic port to the vehicle network.

8. The gateway controller of claim 7 wherein the microprocessor system is further programmed to, in response to the vehicle perimeter alarm not being armed and receiving a change session diagnostic request from the diagnostic port in a presence of a signal indicative of vehicle speed being greater than a predetermined threshold, inhibit transferring the change session diagnostic request to the vehicle network.

9. The gateway controller of claim 7 wherein the microprocessor system is further programmed to, in response to the vehicle perimeter alarm not being armed and receiving a change session diagnostic request from the diagnostic port in a presence of a signal indicative of an ignition switch not being in a run position, inhibit transferring the change session diagnostic request to the vehicle network.

10. The gateway controller of claim 7 wherein the microprocessor system is further programmed to, in response to receiving a message from the diagnostic port in a presence of an alarm status signal indicative of a vehicle perimeter alarm being in an armed state, trigger the vehicle perimeter alarm system to activate an alarm.

11. The gateway controller of claim 7 wherein the microprocessor system is further programmed to, in response to receiving a diagnostic message with a destination address of a controller that programs keys from the diagnostic port in a presence of conditions for inhibiting transferring of messages, transfer the diagnostic message to the vehicle network.

12. The gateway controller of claim 7 wherein the microprocessor system is further programmed to, in response to the vehicle perimeter alarm not being armed and receiving a change session diagnostic request from the diagnostic port in a presence of a signal indicative of vehicle speed being less than or equal to a predetermined threshold and a signal indicative of an ignition switch being in a run position, transmit the change session diagnostic request on the vehicle network.

13. A method for protecting a vehicle network comprising:

interfacing by a controller a diagnostic port to the vehicle network;

inhibiting by the controller message transfers from the diagnostic port to the vehicle network in response to a perimeter alarm system being armed; and

triggering by the controller an alarm in response to receiving a message from the diagnostic port and the perimeter alarm system being armed.

14. The method of claim 13 further comprising inhibiting by the controller a transfer of a change session diagnostic command received from the diagnostic port to the vehicle network in response to a vehicle speed being greater than a predetermined speed or an ignition switch being in a position other than a run position.

15. The method of claim 14 further comprising transmitting by the controller a diagnostic response to the diagnostic port in response to inhibiting transfer.

16. The method of claim 14 further comprising transferring by the controller the change session diagnostic command received in response to a vehicle speed being less than or equal to the predetermined speed and an ignition switch position being in the run position.

17. The method of claim 16 further comprising transferring by the controller a response message to the change session diagnostic command received from the vehicle network to the diagnostic port.

18. The method of claim 13 further comprising transferring by the controller a diagnostic protocol message indicative of a request to program keys received from the diagnostic port to the vehicle network and inhibiting triggering of the alarm while the perimeter alarm system is armed.