Systems and methods for evaluating electronic control units within vehicle emulations

• US 10,146,893 B1
• Filed: 03/27/2015
• Issued: 12/04/2018
• Est. Priority Date: 03/27/2015
• Status: Active Grant

• Current Assignee: Gen Digital Inc.
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Evans, Nathan, Benameur, Azzedine, Shen, Yun
• Primary Examiner(s): Kim, Eunhee
• Application Number:
  US14/671,036
• Time in Patent Office: 1,348 Days
• Field of Search: 703 7- 8
• CPC Class Codes: G06F 30/15 Vehicle, aircraft or watercraft design
• CPC Class Codes: G06F 30/20 Design optimisation, verification or simulation optimisation, verification or simulation of circuit designs G06F30/30

Abstract

A computer-implemented method for evaluating electronic control units within vehicle emulations may include (1) connecting an actual electronic control unit for a vehicle to a vehicle bus that emulates network traffic rather than actual network traffic generated by operation of the vehicle, (2) manipulating input to the actual electronic control unit to test how safely the actual electronic control unit and the emulated electronic control unit respond to the manipulated input, (3) detecting an output from the actual electronic control unit that indicates a response, from the actual electronic control unit, to manipulating the input, and (4) evaluating a safety level of at least one of the actual electronic control unit and the emulated electronic control unit based on detecting the output from the actual electronic control unit. Various other methods, systems, and computer-readable media are also disclosed.

Claims

1. A computer-implemented method for evaluating electronic control units within vehicle emulations, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

connecting an actual electronic control unit for a vehicle to a vehicle bus that emulates network traffic rather than actual network traffic generated by operation of the vehicle, the emulated network traffic including network traffic from an emulation of another electronic control unit;

manipulating input to the actual electronic control unit to test how the actual electronic control unit and the emulated electronic control unit respond to the manipulated input, wherein the input triggers an emulation of an unsafe or dangerous condition defined by values for two or more vehicle attributes;

detecting an output from the actual electronic control unit that indicates a response, from the actual electronic control unit, to manipulating the input;

determining that the manipulated input causes at least one of the actual electronic control unit and the emulated electronic control unit to create the emulation of the unsafe or dangerous condition within the vehicle, based on the output from the actual electronic control unit.

2. The computer-implemented method of claim 1, wherein the unsafe or dangerous condition is previously determined to be unsafe or dangerous.

3. The computer-implemented method of claim 2, wherein the unsafe or dangerous condition is thusly defined in a database.

4. The computer-implemented method of claim 1, wherein when considered in isolation, each of the values for the two or more vehicle attributes does not correspond with an unsafe or dangerous condition.

5. The computer-implemented method of claim 1, wherein the two or more vehicle attributes comprise two or more of:

speed, acceleration, brake level, wheel input, amp level, electrical signal frequency, input/output network command, temperature, sound, frequency, motion, and vibration.

6. The computer-implemented method of claim 1, wherein the steps of manipulating the input and detecting the output are continuously performed and the method further comprises monitoring the output from the actual electronic control unit, the step of monitoring being performed before the step of determining.

7. The computer-implemented method of claim 1, wherein the vehicle bus corresponds to at least one of:

the FLEXRAY protocol;

the CONTROLLER AREA NETWORK protocol; and

the MEDIA ORIENTED SYSTEMS TRANSPORT protocol.

8. The computer-implemented method of claim 1, wherein detecting the output from the actual electronic control unit comprises at least one of:

detecting network traffic output from the actual electronic control unit to the vehicle bus; and

detecting a change in a physical state of the actual electronic control unit.

9. The computer-implemented method of claim 1, wherein the step of determining comprises determining that the manipulated input causes the emulated electronic control unit to create the emulation of the unsafe or dangerous condition within the vehicle, based on the output from the actual electronic control unit.

10. A system for evaluating electronic control units within vehicle emulations, the system comprising:

a connection module, stored in memory, that connects an actual electronic control unit for a vehicle to a vehicle bus that emulates network traffic rather than actual network traffic generated by operation of the vehicle, the emulated network traffic including network traffic from an emulation of another electronic control unit;

a manipulation module, stored in memory, that manipulates input to the actual electronic control unit to test how the actual electronic control unit and the emulated electronic control unit respond to the manipulated input, wherein the input triggers an emulation of an unsafe or dangerous condition defined by values for two or more vehicle attributes;

a detection module, stored in memory, that detects an output from the actual electronic control unit that indicates a response, from the actual electronic control unit, to manipulating the input;

an evaluation module, stored in memory, that determines that the manipulated input causes at least one of the actual electronic control unit and the emulated electronic control unit to create the emulation of the unsafe or dangerous condition within the vehicle, based on the output from the actual electronic control unit; and

at least one physical processor configured to execute the connection module, the manipulation module, the detection module, and the evaluation module.

11. The system of claim 10, wherein the connection module records actual network traffic generated by operation of the vehicle.

12. The system of claim 11, wherein the vehicle bus emulates network traffic by replaying the recorded actual network traffic.

13. The system of claim 10, wherein the connection module connects the actual electronic control unit for the vehicle to the vehicle bus without the actual electronic control unit being integrated within the vehicle.

14. The system of claim 10, wherein the manipulation module manipulates input to the actual electronic control unit by fuzzing the input by altering the input to include at least one of random input and invalid input.

15. The system of claim 10, wherein the emulated network traffic includes network traffic from a plurality of emulations of other electronic control units.

16. The system of claim 10, wherein the vehicle bus corresponds to at least one of:

the FLEXRAY protocol;

the CONTROLLER AREA NETWORK protocol; and

the MEDIA ORIENTED SYSTEMS TRANSPORT protocol.

17. The system of claim 10, wherein the detection module detects the output from the actual electronic control unit by at least one of:

detecting network traffic output from the actual electronic control unit to the vehicle bus; and

detecting a change in a physical state of the actual electronic control unit.

18. The system of claim 10, wherein the evaluation module determines that the manipulated input causes the emulated electronic control unit to create the emulation of the unsafe or dangerous condition within the vehicle, based on the output from the actual electronic control unit.

19. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

connect an actual electronic control unit for a vehicle to a vehicle bus that emulates network traffic rather than actual network traffic generated by operation of the vehicle, the emulated network traffic including network traffic from an emulation of another electronic control unit;

manipulate input to the actual electronic control unit to test how the actual electronic control unit and the emulated electronic control unit respond to the manipulated input, wherein the input triggers an emulation of an unsafe or dangerous condition defined by values for two or more vehicle attributes;

detect an output from the actual electronic control unit that indicates a response, from the actual electronic control unit, to manipulating the input; and

determining that the manipulated input caused at least one of the actual electronic control unit and the emulated electronic control unit to create the emulation of the unsafe or dangerous condition within the vehicle, based on the output from the actual electronic control unit.