NETWORK DEVICE, AND DATA SENDING AND RECEIVING SYSTEM

• US 20150358351A1
• Filed: 12/20/2013
• Published: 12/10/2015
• Est. Priority Date: 01/28/2013
• Status: Active Grant

• Current Assignee: Hitachi Astemo Ltd. (Hitachi, Ltd.)
• Original Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Inventors: OTSUKA, Satoshi, NARISAWA, Fumio, ISHIGOOKA, Tasuku, SASAZAWA, Kazuyoshi
• Granted Patent: US 9,794,286 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

In order to detect and prevent attacks in which the network is infested with unauthorized data to cause malfunction, the invention aims, on the basis of network cycle information, to detect errors and to prevent unauthorized data forwarding in a network system such as a vehicle-mounted network. This network device is provided with a communication unit which receives data, a time management unit which manages the reception time at which data is received, and a control unit which processes data. If, for received data used as a reference, first data is received having the same identifier and a reception interval shorter than a prescribed cycle, the control unit waits to receive data having the same identifier as the first data from the reception time of the received data used as a reference up until the prescribed cycle has elapsed, and if during this interval second data is received having the same identifier as the first data, the control unit determines that an error has occurred and performs cycle abnormality detection processing (see FIG. 1).

Claims

1. A network device which periodically receives and processes the data, comprising:

a communication unit that receives data;

a time management unit that manages a reception time at which the data is received; and

a control unit that processes the received data,

wherein the control unit records the reception time in the time management unit for each identifier included in the data received by the communication unit, and

wherein if first data having the same identifier as data being a reference is received for which an interval for receiving the data is shorter than a predetermined cycle,

when second data having the same identifier as the first data is received until the predetermined cycle has elapsed from a time of receiving the data being a reference, the control unit performs a process occurring when cycle abnormality is detected, and

when data having the same identifier as the first data is not received until the predetermined cycle has elapsed, the control unit performs a predetermined process on the first data.

2. The network device according to claim 1,

wherein if the first data is received for which the interval for receiving the data is shorter than the predetermined cycle, when the second data having the same identifier as the first data is received until the predetermined cycle has elapsed, the control unit performs a similarity determination process on the first data and the second data,

if it is determined to be dissimilar from result of the similarity determination process, the control unit performs the process occurring when cycle abnormality is detected, and

if it is determined to be similar, the control unit performs a predetermined process on the first data and the second data.

3. The network device according to claim 1,

wherein the control unit discards the first data and the second data, as the process occurring when cycle abnormality is detected.

4. The network device according to claim 3,

wherein the control unit performs a process of storing any one or more pieces of information among an identifier for which cycle abnormality is detected, the number of cycle abnormality occurrences, a time of occurrence of cycle abnormality, and a bus ID for which cycle abnormality is detected, as abnormality-related information, in the process occurring when cycle abnormality is detected.

5. The network device according to claim 4, further comprising:

a user warning unit that outputs warning information,

wherein during the process occurring when cycle abnormality is detected, the control unit transmits the abnormality-related information to the user warning unit, as a warning indication,

and the user warning unit gives warning based on the received warning indication.

6. The network device according to claim 1,

wherein if the first data is received for which the interval for receiving the data is shorter than the predetermined cycle,

when the second data having the same identifier as the first data is received until the predetermined cycle has elapsed, the control unit discards the first data and the second data, without performing a transfer process thereof, and

when the second data having the same identifier as the first data is not received until the predetermined cycle has elapsed, the control unit performs a transfer process of transferring the first data to a predetermined network.

7. A data sending and receiving system configured by a first network device that transmits a warning indication to a network, and a second network device that receives the warning indication transmitted to the network,

the data sending and receiving system including:

a communication unit that receives data, and transmits the warning indication, in the first network device,

a time management unit that manages a reception time at which the data is received, in the first network device,

a control unit that processes the data, in the first network device,

a communication unit that receives the warning indication, in the second network device, and

a control unit that manages the communication unit and processes the warning indication, in the second network device,

wherein in the control unit in the first network device, if the first data is received for which the interval for receiving data is shorter than a predetermined cycle, when the second data having the same identifier as the first data is received until the predetermined cycle has elapsed, the first network device transmits a warning indication to the second network device, and the control unit in the second network device processes the warning indication.

8. The data sending and receiving system according to claim 7,

wherein in the process of the warning indication, a fail-safe process is implemented.