Method for detecting fraudulent frame sent over an in-vehicle network system

• US 10,462,226 B2
• Filed: 10/25/2018
• Issued: 10/29/2019
• Est. Priority Date: 05/08/2014
• Status: Active Grant

• Current Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Intellectual Property Corporation of America (Panasonic Holdings Corporation)
• Inventors: Kishikawa, Takeshi, Matsushima, Hideki, Haga, Tomoyuki, Maeda, Manabu, Unagami, Yuji, Ujiie, Yoshihiro
• Primary Examiner(s): Moorthy, Aravind K
• Application Number:
  US16/170,451
• Publication Number:
  US 20190068715A1
• Time in Patent Office: 369 Days
• Field of Search: 726 1, 726 4, 726 13, 713161, 713168
• CPC Class Codes: B60R 16/023 for transmission of signals between vehicle parts or subsystems
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A fraud detection method for use in an in-vehicle network system including a plurality of electronic control units that communicate with one another via an in-vehicle network is provided. The method includes receiving at least one data frame sent to the in-vehicle network, verifying a specific identifier in the received data frame only when the received data frame is event-driven data and a state of a vehicle having the in-vehicle network system mounted therein is a predetermined state, detecting the received data frame as an authenticated data frame when the verifying is successful, and detecting the received data frame as a fraudulent data frame when the verifying fails. The predetermined state of the vehicle is the vehicle traveling.

Claims

1. A fraud detection method for use in an in-vehicle network system, the fraud detection method comprising:

receiving at least one data frame sent to an in-vehicle network;

verifying a specific identifier in the received data frame only when the received data frame is event-driven data and a state of a vehicle having the in-vehicle network system mounted therein is a predetermined state;

detecting the received data frame as an authenticated data frame when the verifying is successful; and

detecting the received data frame as a fraudulent data frame when the verifying fails,

wherein the predetermined state of the vehicle is the vehicle traveling.

2. The fraud detection method according to claim 1, wherein the specific identifier is disposed in a data field of the received data frame at a predetermined position, and

wherein the verifying verifies whether the specific identifier is a message authentication code that reflects information in the received data frame.

3. The fraud detection method according to claim 1, wherein the specific identifier is disposed in a data field of the received data frame at a predetermined position, and

wherein the verifying verifies whether the specific identifier is same as a predetermined value.

4. The fraud detection method according to claim 1, wherein the specific identifier is disposed in a data field of the received data frame at a predetermined position, and

wherein the verifying verifies whether the specific identifier is same as a counter value that reflects a number of times at which data frames that are the event-driven data are received.

5. The fraud detection method according to claim 1, wherein the at least one data frame sent to the in-vehicle network comprises a plurality of data frames,

wherein in the receiving, the plurality of data frames is sequentially received,

wherein the specific identifier is disposed in a data field of the received plurality of data frames at a predetermined position, and

wherein the verifying verifies whether the specific identifier is same as a value obtained through a predetermined calculation based on a specific identifier in a data frame previously received in the receiving of the plurality of data frames.

6. The fraud detection method according to claim 1, wherein the verifying determines whether the received data frame is not the event-driven data,

wherein when the received data frame is the event-driven data, whether the state of the vehicle is the predetermined state is determined, and

wherein when the state of the vehicle is the predetermined state, the verifying is performed on the specific identifier.

7. The fraud detection method according to claim 1, wherein when the received data frame is the event-driven data, the received data frame is detected as being an authorized data frame.

8. The fraud detection method according to claim 1, wherein in the verifying, when the received data frame is the event-driven data and the state of the vehicle having the in-vehicle network system mounted therein is not the predetermined state, the received data frame is detected as being an authorized data frame.

9. The fraud detection method according to claim 1, wherein in the verifying, when the received data frame is the event-driven data and the state of the vehicle having the in-vehicle network system mounted therein is not the predetermined state, the received data frame is detected as being the fraudulent data frame.

10. A method for use in an in-vehicle network system, the method comprising:

providing a specific identifier in a data frame, that is to be sent, only when a state of a vehicle having the in-vehicle network system mounted therein is a predetermined state and the data frame is event-driven data; and

sending, to an in-vehicle network, the data frame that includes the provided specific identifier and that is the event-driven data,

wherein the predetermined state of the vehicle is the vehicle traveling.

11. The method according to claim 10, wherein in the providing, a message authentication code that reflects information in the data frame to be sent is disposed in a data field of the data frame at a predetermined position as the specific identifier.

12. The method according to claim 10, wherein in the providing, a predetermined value is disposed in a data field of the data frame as the specific identifier.

13. The method according to claim 10, wherein in the providing, a counter value that reflects a number of transmissions of data frames that are the event-driven data in the sending is disposed in a data field of the data frame at a predetermined position as the specific identifier.

14. The method according to claim 10, wherein the data frame sent to the in-vehicle network comprises a plurality of data frames, and

wherein in the providing, a resultant value obtained by performing a predetermined calculation on a basis of a specific identifier provided in a data frame previously sent in the sending is disposed in a data field of each of the plurality of data frames.

15. An in-vehicle network system, comprising:

a first electronic controller including one or more memories and circuitry that, in operation, provides a specific identifier in at least one data frame, that is to be sent, only when a state of a vehicle having the in-vehicle network system mounted therein is a predetermined state and the data frame is event-driven data regarding a transmission period, and sends, to an in-vehicle network, the data frame that includes the provided specific identifier and that is the event-driven data; and

a second electronic controller including one or more memories and circuitry that, in operation, receives the data frame sent to the in-vehicle network and verifies the specific identifier in the received data frame only when the received data frame is the event-driven data and the state of the vehicle having the in-vehicle network system mounted therein is the predetermined state,

wherein when verification is successful, the second electronic controller detects the received data frame as being an authorized data frame,

wherein when the verification fails, the second electronic controller detects the received data frame as being a fraudulent data frame, and

wherein the predetermined state of the vehicle is the vehicle traveling.

16. An electronic controller, comprising:

one or more memories; and

circuitry that, in operation;

provides a specific identifier in at least one data frame, that is to be sent, only when a state of a vehicle having an in-vehicle network system mounted therein is a predetermined state and the data frame is event-driven data; and

sends, to an in-vehicle network, the data frame that includes the provided specific identifier and that is the event-driven data,

wherein the predetermined state of the vehicle is the vehicle traveling.

17. An electronic controller, comprising:

one or more memories; and

circuitry that, in operation;

receives at least one data frame sent to an in-vehicle network; and

verifies a specific identifier in the received data frame only when the received data frame is event-driven data and a state of a vehicle having an in-vehicle network system mounted therein is a predetermined state,

wherein when verification is successful, the electronic controller detects the received data frame as being an authorized data frame,

wherein when the verification fails, the electronic controller detects the received data frame as being a fraudulent data frame, and

wherein the predetermined state of the vehicle is the vehicle traveling.