Network device, and data sending and receiving system

• US 9,794,286 B2
• Filed: 12/20/2013
• Issued: 10/17/2017
• Est. Priority Date: 01/28/2013
• Status: Active Grant

• Current Assignee: Hitachi Astemo Ltd. (Hitachi, Ltd.)
• Original Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Inventors: Otsuka, Satoshi, Ishigooka, Tasuku, Narisawa, Fumio, Sasazawa, Kazuyoshi
• Primary Examiner(s): Tran, Ellen
• Application Number:
  US14/763,597
• Publication Number:
  US 20150358351A1
• Time in Patent Office: 1,397 Days
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

In order to detect and prevent attacks in which the network is infested with unauthorized data to cause malfunction, the invention aims, on the basis of network cycle information, to detect errors and to prevent unauthorized data forwarding in a network system such as a vehicle-mounted network. This network device is provided with a communication unit which receives data, a time management unit which manages the reception time at which data is received, and a control unit which processes data. If, for received data used as a reference, first data is received having the same identifier and a reception interval shorter than a prescribed cycle, the control unit waits to receive data having the same identifier as the first data from the reception time of the received data used as a reference up until the prescribed cycle has elapsed, and if during this interval second data is received having the same identifier as the first data, the control unit determines that an error has occurred and performs cycle abnormality detection processing.

Claims

1. A network device of a vehicle, the network device comprising:

a network interface communicatively coupled to one or more Electronic Control Units via a network bus, wherein each of the one or more Electronic Control Units controls a system of the vehicle using the network bus;

a memory; and

a processor communicatively coupled to the memory and the network interface;

wherein the processor;

receives, via the network interface, a plurality of data frames from the one or more Electronic Control Units, wherein the plurality of data frames includes a first data frame and a second data frame and each of the plurality of frames includes an identifier,

records, in the memory, a reception time for each of the plurality of data frames,

determines, for each of the plurality of data frames, a cycle from a plurality of cycles based on the reception time,

on a condition that the first data frame and the second data frame are received within a waiting time, have a same identifier and the cycle of the first data frame is shorter than cycle of the second data frame, determines that an abnormality is detected and performs a defensive operation against the abnormality,

on a condition that the first data frame and the second data frame have the same identifier and the second frame is not received within the waiting time, allows the first frame to traverse the network bus.

2. The network device according to claim 1, wherein the processor further:

on a condition that the first data frame and the second data frame are received within a waiting time and have the same identifier, obtains a difference between the first data frame and the second data frame,

on a condition that the difference is out of range, determines that the abnormality is detected and performs the defensive operation against the abnormality,

on a condition that the difference is within the range, allows the first data frame and the second data frame to traverse the network bus.

3. The network device according to claim 1, wherein the defensive operation includes at least one of fail-safe, unauthorized transfer prevention, disposal of data, recording of a state, and notifying a user or other systems of warning.

4. The network device according to claim 3,

wherein the processor further stores in the memory, abnormality-related information for at least one of the first data frame, and the second data frame for which the abnormality is detected, wherein the abnormality-related information includes any one or more pieces of information among an identifier for which cycle abnormality is detected, a number of cycle abnormality occurrences, a time of occurrence of cycle abnormality, and a bus ID for which cycle abnormality is detected, as abnormality-related information.

5. The network device according to claim 4, further comprising:

a user warning unit that outputs warning information,

wherein the processor, when the abnormality is detected, transmits the abnormality-related information to the user warning unit, as a warning indication,

and the user warning unit gives warning based on the warning indication.

6. A communication system of a vehicle, the system comprising:

a plurality of electronic control units, wherein each of the electronic control units control one or more of the system of the vehicle;

a gateway communicatively coupled to the plurality of electronic control units via network buses, wherein the gateway includes;

a network interface communicatively coupled to the network buses,

a memory, and

a processor communicatively coupled to the memory and the network interface;

wherein the processor of the gateway;

receives, via the network interface, a plurality of data frames from the one or more Electronic Control Units, wherein the plurality of data frames includes a first data frame and second data frame and each of the plurality of frames includes an identifier,

records, in the memory, a reception time for each of the plurality of data frames,

determines, for each of the plurality of data frames, a cycle from a plurality of cycles based on the reception time,

determines a cycle duration for each of the plurality of data frames,

on a condition that the first data frame and the second data frame are received within a waiting time, have a same identifier and the cycle of the first data frame is shorter than cycle of the second data frame, determines that an abnormality is detected and performs a defensive operation against the abnormality,

on a condition that the first data frame and the second data frame have a same identifier and the second frame is not received within the waiting time, allows the first frame to traverse the network buses.

7. The communication system according to claim 6, wherein the defensive operation includes at least one of fail-safe, unauthorized transfer prevention, disposal of data, recording of a state, and notifying a user or other systems of warning.