Bus monitoring security device and bus monitoring security system

• US 9,038,132 B2
• Filed: 09/13/2012
• Issued: 05/19/2015
• Est. Priority Date: 09/28/2011
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Harata, Yuzo, Suzuki, Satoshi, Natsume, Mitsuyoshi, Kishigami, Tomohisa, Takahashi, Yasuyuki
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): Giddins, Nelson Scott
• Application Number:
  US13/613,545
• Publication Number:
  US 20130081106A1
• Time in Patent Office: 978 Days
• Field of Search: 726/2
• US Class Current: 726/2
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 43/0811 by checking connectivity

Abstract

A bus monitoring security device is connected to a bus, which includes a tool side bus having a tool connection terminal and an ECU side bus. The ECU side bus is coupled with an ECU, and the tool side bus is coupled with a tool capable of communicating with the ECU via the tool connection terminal. The tool side bus and the ECU side bus are separately coupled with the bus monitoring security device. The bus monitoring security device includes: a controller for determining whether the tool being to access the ECU is connected to the ECU side bus, and for restricting transmission and reception of data between the tool and the ECU when the controller determines that the tool is connected to the ECU side bus.

Claims

1. A bus monitoring security device connected to a bus, which includes a tool side bus having a tool connection terminal and an Electronic Control Unit (ECU) side bus, wherein the ECU side bus is coupled with the ECU, and the tool side bus is coupled with a legal operation tool capable of communicating with the ECU via the tool connection terminal, and wherein the tool side bus and the ECU side bus are separately coupled with the bus monitoring security device, the bus monitoring security device comprising:

a controller determining whether an illegal operation tool accessing the ECU is connected to the ECU side bus, based on data reception from the ECU side bus and data reception from the tool side bus, and restricting transmission and reception of data between the illegal operation tool and the ECU when the controller detects that data is received from only the ECU side bus so that the controller determines that the illegal operation tool is connected to the ECU side bus,

wherein the controller does not restrict transmission and reception of data between the legal o ration tool and the ECU when the controller determines that the fetal operation tool is connected to the tool side bus.

2. The bus monitoring security device according to claim 1,

wherein the controller determines whether a tool accessing the ECU is directly connected to the ECU side bus, and restricts transmission and reception of data between the tool and the ECU when the controller determines that the tool is directly connected to the ECU side bus.

3. The bus monitoring security device according to claim 1,

wherein, when the ECU is in an activation mode, the ECU establishes communication in such a manner that the ECU transmits a data response command to an external device within a predetermined time after the ECU receives a data request command from the external device,

wherein, when the controller switches from the activation mode to a sleep mode after the ECU receives the data request command from the external device, the ECU does not transmit the data response command to the external device within the predetermined time, and

wherein, when the controller determines that the illegal operation tool accessing the ECU is connected to the ECU side bus, the controller controls the ECU as an access object to switch from the activation mode to the sleep mode so that the controller restricts transmission and reception of data between the illegal operation tool and the ECU.

4. The bus monitoring security device according to claim 1,

wherein, when the controller determines that the illegal operation tool accessing the ECU is connected to the ECU side bus, the controller transmits a pseudo data response command to the illegal operation tool so that the controller restricts transmission and reception of data between the illegal operation tool and the ECU.

5. The bus monitoring security device according to claim 1,

wherein, when the controller determines that the illegal operation tool accessing the ECU is connected to the ECU side bus, the controller transmits data having a data format different from a predetermined data format, which is defined in a specification of the bus so that the controller restricts transmission and reception of data between the illegal operation tool and the ECU.

6. The bus monitoring security device according to claim 1, further comprising:

a storage element storing an illegality detection history,

wherein, when the controller determines that the illegal operation tool accessing the ECU is connected to the ECU side bus, the controller controls the storage element to store the illegality detection history, which is information related to connection between the illegal operation tool and the ECU side bus.

7. The bus monitoring security device according to claim 6,

wherein the controller provides notification of the illegality detection history stored in the storage element.

9. The bus monitoring security device according to claim 1,

wherein the controller determines that the illegal operation tool is connected to the ECU side bus, the controller also determines that the illegal operation tool is not connected to the tool side bus.

8. A bus monitoring security system comprising:

a bus monitoring security device connected to a bus, which includes a tool side bus having a tool connection terminal and an Electronic Control Unit (ECU) side bus, wherein the ECU side bus is coupled with the ECU, and the tool side bus is coupled with a legal operation tool capable of communicating with the ECU via the tool connection terminal, and wherein the tool side bus and the ECU side bus are separately coupled with the bus monitoring security device, the bus monitoring security device comprising;

a controller determining whether an illegal operation tool accessing the ECU is connected to the ECU side bus, based on data reception from the ECU side bus and data reception from the tool side bus, and restricting transmission and reception of data between the illegal operation tool and the ECU when the controller detects that data is received from only the ECU side bus so that the controller determines that the illegal operation tool is connected to the ECU side bus; and

a deputy monitoring device determining whether the bus monitoring security device is disconnected from the bus,

wherein, when the deputy monitoring device determines that the bus monitoring security device is disconnected from the bus, the deputy monitoring device restricts transmission and reception of data between the illegal operation tool and the ECU as an access object, and

wherein the controller does not restrict transmission and reception of data between the legal operation tool and the ECU when the controller determines that the legal operation tool is connected to the tool side bus.