Connection detection apparatus and in-vehicle relay apparatus

• US 9,491,197 B2
• Filed: 06/19/2014
• Issued: 11/08/2016
• Est. Priority Date: 06/19/2013
• Status: Active Grant

• Current Assignee: Autonetworks Technologies, Ltd. (Sumitomo Corporation), Sumitomo Electric Industries Limited (Sumitomo Corporation), Sumitomo Wiring Systems Limited (Sumitomo Corporation)
• Original Assignee: Autonetworks Technologies, Ltd. (Sumitomo Corporation), Sumitomo Electric Industries Limited (Sumitomo Corporation), Sumitomo Wiring Systems Limited (Sumitomo Corporation)
• Inventors: Adachi, Naoki
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US14/309,673
• Publication Number:
  US 20140380416A1
• Time in Patent Office: 873 Days
• Field of Search: 726/2
• US Class Current: 1/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A connection detection apparatus in includes a gateway to which communication lines are connected, and which detects whether an unauthorized communication device has been connected to the communication lines. The gateway samples a signal several times from each of the communication lines, and generates waveform information, such as an eye pattern in which the waveforms are superimposed on one another. Furthermore, the gateway has stored therein normal waveform information, such as a mask generated based on the eye pattern at normal times. The gateway compares the generated waveform information with the stored waveform information, and recognizes that the waveform information is abnormal if it does not sufficiently match the normal waveform information. If the waveform information is abnormal, it is determined that an unauthorized communication device has been connected to one or more of the communication lines.

Claims

1. A connection detection apparatus comprising:

a waveform information acquiring unit that is connected to a communication line via which a plurality of in-vehicle communication devices communicate with each other, and is configured to acquire waveform information on signals that are transmitted and received via the communication line;

a waveform information storage unit that has stored therein waveform information on a predetermined signal;

a connection detection unit configured to compare the waveform information acquired by the waveform information acquiring unit with the waveform information on the predetermined signal stored in the waveform information storage unit, and to detect, based on a comparison result, whether an unauthorized device has been connected to the communication line; and

a prohibition unit that prohibits relay processing with respect to the communication line, if connection of an unauthorized communication device to the communication line has been detected.

2. The connection detection apparatus according to claim 1, wherein the waveform information acquiring unit acquires waveform information several times, the connection detection apparatus further comprising:

an eye pattern generation unit configured to generate, based on the waveform information that the waveform information acquiring unit has acquired collectively during the several times, an eye pattern in which multiple waveforms are superimposed on one another,

wherein the waveform information storage unit has stored therein a mask for the eye pattern, the mask being generated based on the predetermined signal, and

the connection detection unit configured to compare the eye pattern generated by the eye pattern generation unit with the mask stored in the waveform information storage unit.

3. The connection detection apparatus according to claim 2,

wherein the waveform information acquiring unit further acquires waveform information on a ringing waveform on the communication line,

the waveform information storage unit further has stored therein waveform information on a predetermined ringing waveform, and

the connection detection unit further detects whether a device has been connected to the communication line, based on a result of comparison between the waveform information on the ringing waveform acquired by the waveform information acquiring unit and the waveform information on the predetermined ringing waveform stored in the waveform information storage unit.

4. The connection detection apparatus according to claim 1,

wherein the waveform information acquiring unit acquires waveform information on a ringing waveform on the communication line,

the waveform information storage unit has stored therein waveform information on a predetermined ringing waveform, and

the connection detection unit detects whether a device has been connected to the communication line, based on a result of comparison between the waveform information on the ringing waveform acquired by the waveform information acquiring unit and the waveform information on the predetermined ringing waveform stored in the waveform information storage unit.

5. The connection detection apparatus according to claim 4,

wherein the waveform information is an amplitude or a convergence time of the ringing waveform.

6. The connection detection apparatus according to claim 1, further comprising:

a signal transmission request unit configured to request the in-vehicle communication devices connected to the communication line to transmit a signal,

wherein the waveform information acquiring unit acquires waveform information on a superimposed signal obtained by superimposing multiple signals that were transmitted from the in-vehicle communication devices in response to the requests given by the signal transmission request unit.

7. The connection detection apparatus according to claim 1, wherein the communication line comprises a plurality communication lines, further comprising:

a communication relay unit that is connected to the plurality of communication lines, and is configured to relay communication between the plurality of communication lines,

wherein the connection detection unit performs, on each communication line, the detection of whether a device has been connected, and

the prohibition unit prohibits the communication relay unit from relaying communication via the communication line for which the connection of an unauthorized device has been detected by the connection detection unit.

8. The connection detection apparatus according to claim 1, further comprising:

a notifying unit configured to perform notification when the connection detection unit has detected the connection of an unauthorized device.

9. An in-vehicle relay apparatus comprising:

a communication relay unit that is connected to a plurality of communication lines via which a plurality of in-vehicle communication devices communicate with each other, and is configured to relay communication between the plurality of communication lines;

waveform information acquiring units each configured to acquire waveform information on signals that are transmitted and received via a respective one of the communication lines;

a waveform information storage unit that has stored therein waveform information on a predetermined signal for each communication line; and

a connection detection unit configured to compare the waveform information acquired by the waveform information acquiring unit with the waveform information on a predetermined signal stored in the waveform information storage unit, and to detect, based on a comparison result, whether an unauthorized device has been connected to the corresponding communication line; and

a prohibition unit that prohibits relay processing with respect to the corresponding communication line, if connection of an unauthorized communication device to the corresponding communication line has been detected.

10. A connection detection method comprising;

storing, in a storage unit, waveform information on a predetermined signal;

acquiring waveform information on signals that are transmitted and received via a communication line via which a plurality of in-vehicle communication devices communicate with each other;

comparing the acquired waveform information with the waveform information on the predetermined signal stored in the waveform information storage unit, and detecting, based on a comparison result, whether an unauthorized device has been connected to the communication line; and

prohibiting relay processing with respect to the communication line, if connection of an unauthorized communication device to the communication line has been detected.