ABNORMALITY DETECTION APPARATUS AND ABNORMALITY DETECTION METHOD

• US 20200137099A1
• Filed: 12/30/2019
• Published: 04/30/2020
• Est. Priority Date: 07/26/2017
• Status: Active Grant

• Current Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Inventors: HAGA, TOMOYUKI, TANABE, MASATO, TORISAKI, YUISHI, TERAZAWA, HIROYASU, KATO, RYO
• Granted Patent: US 11,539,727 B2
• Time in Patent Office: Days
• CPC Class Codes: B60R 16/02 electric constitutive elements
• CPC Class Codes: B60R 16/023 for transmission of signals between vehicle parts or subsystems
• CPC Class Codes: B60W 2050/021 Means for detecting failure or malfunction
• CPC Class Codes: B60W 2050/0295 Inhibiting action of specific actuators or systems
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models
• CPC Class Codes: B60W 50/029 Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts
• CPC Class Codes: H04L 12/40026 Details regarding a bus guardian
• CPC Class Codes: H04L 12/413 with random access, e.g. carrier-sense multiple-access with collision detection [CSMA-CD]
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/4026 Bus for use in automation systems
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04W 4/48 for in-vehicle communication

Abstract

An abnormality detection apparatus for a mobility entity and for detecting an abnormality in a network system is provided. The network system includes a first network and a second network that use different communication protocols. A first communication circuit receives state information indicating a state of the mobility entity. The state information is acquired from the second network. A second communication circuit transmits and receives a first frame according to a communication protocol used in the first network. A memory stores an abnormality detection rule. A processor detects, based on the state information and the abnormality detection rule, whether a control command included in the first frame received by the second communication circuit is abnormal. In a case where the control command is abnormal, the processor prohibits the control command from being transmitted.

Claims

1. An abnormality detection apparatus for a mobility entity and for detecting an abnormality in a network system, the network system including a first network and a second network that use different communication protocols, the abnormality detection apparatus comprising:

a first communication circuit that receives state information indicating a state of the mobility entity, the state information being acquired from the second network;

a second communication circuit that transmits and receives a first frame according to a communication protocol used in the first network;

a memory that stores an abnormality detection rule; and

a processor that, in operation, performs operations including;

detecting, based on the state information and the abnormality detection rule, whether a control command included in the first frame received by the second communication circuit is abnormal, and

in a case where the processor detects that the control command is abnormal, prohibiting the control command from being transmitted.

2. The abnormality detection apparatus according to claim 1, wherein

the abnormality detection rule includes a first rule indicating a control command allowed in each of a plurality of different states of the mobility entity, and

the operations further include:

in a second case where the state of the mobility entity indicated by the state information is not included in any one of the plurality of states, for which the first rule indicates the allowed control command, detecting that the control command is abnormal.

3. The abnormality detection apparatus according to claim 1, wherein the control command causes the mobility entity to execute at least one of moving forward, turning, and stopping.

4. The abnormality detection apparatus according to claim 1, wherein

the first network is according to Ethernet protocol,

the second network is according to CAN protocol,

the first communication circuit receives the state information by receiving a CAN frame including the state information,

the abnormality detection rule includes a first rule for detecting whether the CAN frame is abnormal, and

the operations further include:

in a second case where the processor detects that the CAN frame is abnormal, prohibiting the control command from being transmitted.

5. The abnormality detection apparatus according to claim 1, wherein

the first network is according to Ethernet protocol,

the second network is according to CAN protocol, and

the first communication circuit receives an Ethernet frame in which a CAN frame indicating the state information is included.

6. The abnormality detection apparatus according to claim 5, wherein

the Ethernet frame includes a plurality of CAN frames, the plurality of CAN frames including the CAN frame indicating the state information,

the abnormality detection rule includes a first rule for detecting whether each of the plurality of CAN frames is abnormal,

the plurality of CAN frames includes identifiers that are different depending on frame type,

the first rule indicates allowable CAN frame reception period ranges corresponding to the identifiers, and

the operations further include:

detecting an abnormality based on reception times corresponding to CAN frames having a same identifier such that, in a second case where a difference between a first reception time of a first CAN frame of the plurality of CAN frames and a second reception time of a second CAN frame of the plurality of CAN frames received one frame before the first CAN frame is out of an associated allowable CAN frame reception period range indicated by the first rule, the first CAN frame is abnormal.

7. The abnormality detection apparatus according to claim 6, wherein

the first rule further indicates allowable amounts of change corresponding to the identifiers, the allowable amounts of change determined from a data value of a CAN frame immediately previous to a current CAN frame, and

the operations further include:

detecting an abnormality such that, in a third case where a difference of a first data value of the first CAN frame from a second data value of the second CAN frame is greater than an associated allowable amount of change indicated by the first rule, the first CAN frame is abnormal.

8. The abnormality detection apparatus according to claim 6, wherein the operations further include:

acquiring, as the abnormality detection rule, rules associated with the identifiers, and

detecting that the CAN frame that indicates the state information is abnormal based on the abnormality detection rule.

9. The abnormality detection apparatus according to claim 5, wherein

the Ethernet frame includes a plurality of CAN frames, the plurality of CAN frames including the CAN frame indicating the state information,

the abnormality detection rule includes a first rule for detecting whether each of the plurality of CAN frames is abnormal,

the plurality of CAN frames includes identifiers that are different depending on frame type,

the first rule indicates unallowable CAN frame reception period ranges corresponding to the identifiers, and

the operations further include:

detecting an abnormality based on reception times corresponding to CAN frames having a same identifier such that, in a second case where a difference between a first reception time of a first CAN frame of the plurality of CAN frames and a second reception time of a second CAN frame of the plurality of CAN frames received one frame before the first CAN frame is within an associated unallowable CAN frame reception period range indicated by the first rule, the first CAN frame is abnormal.

10. The abnormality detection apparatus according to claim 9, wherein

the first rule further indicates unallowable amounts of change corresponding to the identifiers, the unallowable amounts of change determined from a data value of a CAN frame immediately previous to a current CAN frame, and

the operations further include:

detecting an abnormality such that, in a third case where a difference of a first data value of the first CAN frame from a second data value of the second CAN frame is within an associated unallowable amount of change indicated by the first rule, the first CAN frame is abnormal.

11. An abnormality detection method for an abnormality detection apparatus that is configured to be in a mobility entity for detecting an abnormality in a network system, the network system including a first network and a second network that use different communication protocols, the abnormality detection method comprising:

receiving state information indicating a state of the mobility entity, the state information being acquired from the second network;

transmitting and receiving a first frame using a communication protocol of the first network;

detecting, based on the state information and an abnormality detection rule stored in a memory included in the abnormality detection apparatus, whether a control command included in the received first frame is abnormal; and

in a case where the control command is abnormal, prohibiting the control command from being transmitted.