Security for network-connected vehicles and other network-connected processing environments

• US 7,356,832 B1
• Filed: 02/10/2000
• Issued: 04/08/2008
• Est. Priority Date: 07/01/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Eibach, Wolfgang G, Nuttall, Mark P, Gruetzner, Matthias
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US09/501,756
• Time in Patent Office: 2,980 Days
• Field of Search: 717168-178, 701 29- 49, 340/500, 340/514, 726 11- 15, 726/2, 726/4, 705/16
• US Class Current: 726/2
• CPC Class Codes: B60R 25/00 Fittings or systems for preventing or indicating unauthorised use or theft of vehicles locks for vehicles E05B77/00-E05B85/00
• CPC Class Codes: F04C 2270/90 Remote control, e.g. wireless, via LAN, by radio, or by a wired connection from a central computer
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and apparatus provide security for a network-connected vehicle (or other networked environment) in which a predefined set of permitted operations relating to protected resources can be initiated remotely from elsewhere in the network, while security is maintained for the protected resources (for example, an engine performance optimisation control unit or air conditioning control unit within a vehicle) by preventing remote initiation of any other operations on a data processing unit which is connected to the protected resources. One of a pair of gateway components runs on each of two data processing units within the vehicle (or other environment), the first processing unit being connected to the vehicle'"'"'s device control units and the second processing unit being connected to the external network. The gateway components control the types of communications which can be passed from the network-connected side to the first processing unit such that only permitted operations can be requested and no unauthorised operations can be initiated remotely.

Claims

1. A data processing apparatus for a vehicle, including:

a first data processing unit (A) connected to device control units of the vehicle;

a second data processing unit (B) connected to a communications apparatus providing a wireless connection to an external network, such that operation requests can be received at the second data processing unit (B) from the external network;

a data communications link between the first and second data processing units; and

a gateway component for controlling communications across the data communications link, the gateway component limiting passing of the operation requests from the second data processing unit to the vehicle'"'"'s device control units to only a predefined set of permitted operations.

2. A data processing apparatus according to claim 1, wherein the first data processing unit (A) is adapted to store in an unmodifiable form a list of said predefined set of permitted operations and includes a gateway component for comparing all operation requests received from the second data processing unit (B) with the list of permitted operations, and then to pass the permitted operation requests to respective ones of said device control units and to discard non-permitted operation requests.

3. A data processing apparatus according to claim 2 wherein the first data processing unit (A) includes a static operating system environment and the gateway component of the first data processing unit (A) runs in the static operating system environment.

4. A data processing apparatus according to claim 1, wherein the second data processing unit (B) is adapted to store one or more access control lists defining which operation requests are permitted for particular requesters, and wherein the second data processing unit (B) includes a gateway component for comparing all operation requests on the first data processing unit (A) with the access control lists and only passing to the first data processing unit (A) those operation requests which are permitted for the respective requesters and discarding non-permitted operation requests.

5. A data processing apparatus according to claim 1, wherein:

the first data processing unit (A) includes a Real Time Operating System; and

the second data processing unit (B) includes means for performing authentication of requesters and a gateway component for comparing all operation requests sent to the first data processing unit (A) with access control lists and for passing to the first data processing unit (A) only those operation requests which are permitted for the respective requesters and discarding non-permitted operation requests.