JP6539363B2 - 不正通信検知方法、不正通信検知システム及びプログラム - Google Patents

不正通信検知方法、不正通信検知システム及びプログラム Download PDF

Info

Publication number
JP6539363B2
JP6539363B2 JP2018019993A JP2018019993A JP6539363B2 JP 6539363 B2 JP6539363 B2 JP 6539363B2 JP 2018019993 A JP2018019993 A JP 2018019993A JP 2018019993 A JP2018019993 A JP 2018019993A JP 6539363 B2 JP6539363 B2 JP 6539363B2
Authority
JP
Japan
Prior art keywords
message
communication pattern
unit
communication
attack
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2018019993A
Other languages
English (en)
Japanese (ja)
Other versions
JP2018182724A (ja
JP2018182724A5 (enExample
Inventor
前田　学
学 前田
剛 岸川
剛 岸川
大介 国宗
大介 国宗
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Panasonic Intellectual Property Corp of America
Original Assignee
Panasonic Intellectual Property Corp of America
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Panasonic Intellectual Property Corp of America filed Critical Panasonic Intellectual Property Corp of America
Priority to PCT/JP2018/007102 priority Critical patent/WO2018186053A1/ja
Priority to CN201880001418.0A priority patent/CN109005678B/zh
Priority to EP18781211.0A priority patent/EP3609138B1/en
Publication of JP2018182724A publication Critical patent/JP2018182724A/ja
Priority to US16/244,160 priority patent/US10986105B2/en
Publication of JP2018182724A5 publication Critical patent/JP2018182724A5/ja
Application granted granted Critical
Publication of JP6539363B2 publication Critical patent/JP6539363B2/ja
Priority to US17/194,514 priority patent/US11438350B2/en
Priority to US17/876,204 priority patent/US11765186B2/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B60R16/0231—Circuits relating to the driving or the functioning of the vehicle
    • B60R16/0232—Circuits relating to the driving or the functioning of the vehicle for measuring vehicle parameters and indicating critical, abnormal or dangerous conditions
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05D—SYSTEMS FOR CONTROLLING OR REGULATING NON-ELECTRIC VARIABLES
    • G05D1/00—Control of position, course, altitude or attitude of land, water, air or space vehicles, e.g. using automatic pilots
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40—Bus networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40—Bus networks
    • H04L2012/40267—Bus for use in transportation systems
    • H04L2012/40273—Bus for use in transportation systems the transportation system being a vehicle

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Mechanical Engineering (AREA)
  • Aviation & Aerospace Engineering (AREA)
  • Radar, Positioning & Navigation (AREA)
  • Remote Sensing (AREA)
  • Small-Scale Networks (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
JP2018019993A 2017-04-07 2018-02-07 不正通信検知方法、不正通信検知システム及びプログラム Active JP6539363B2 (ja)

Priority Applications (6)

Application Number Priority Date Filing Date Title
PCT/JP2018/007102 WO2018186053A1 (ja) 2017-04-07 2018-02-27 不正通信検知方法、不正通信検知システム及びプログラム
CN201880001418.0A CN109005678B (zh) 2017-04-07 2018-02-27 非法通信检测方法、非法通信检测系统以及记录介质
EP18781211.0A EP3609138B1 (en) 2017-04-07 2018-02-27 Method for detecting unauthorized communication, system for detecting unauthorized communication, and program
US16/244,160 US10986105B2 (en) 2017-04-07 2019-01-10 Unauthorized communication detection method, unauthorized communication detection system, and non-transitory computer-readable recording medium storing a program
US17/194,514 US11438350B2 (en) 2017-04-07 2021-03-08 Unauthorized communication detection method, unauthorized communication detection system, and non-transitory computer-readable recording medium storing a program
US17/876,204 US11765186B2 (en) 2017-04-07 2022-07-28 Unauthorized communication detection method, unauthorized communication detection system, and non-transitory computer-readable recording medium storing a program

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2017076568 2017-04-07
JP2017076568 2017-04-07

Related Child Applications (1)

Application Number Title Priority Date Filing Date
JP2018241048A Division JP7030046B2 (ja) 2017-04-07 2018-12-25 不正通信検知方法、不正通信検知システム及びプログラム

Publications (3)

Publication Number Publication Date
JP2018182724A JP2018182724A (ja) 2018-11-15
JP2018182724A5 JP2018182724A5 (enExample) 2019-02-14
JP6539363B2 true JP6539363B2 (ja) 2019-07-03

Family

ID=64276299

Family Applications (2)

Application Number Title Priority Date Filing Date
JP2018019993A Active JP6539363B2 (ja) 2017-04-07 2018-02-07 不正通信検知方法、不正通信検知システム及びプログラム
JP2018241048A Active JP7030046B2 (ja) 2017-04-07 2018-12-25 不正通信検知方法、不正通信検知システム及びプログラム

Family Applications After (1)

Application Number Title Priority Date Filing Date
JP2018241048A Active JP7030046B2 (ja) 2017-04-07 2018-12-25 不正通信検知方法、不正通信検知システム及びプログラム

Country Status (3)

Country Link
US (2) US10986105B2 (enExample)
EP (1) EP3609138B1 (enExample)
JP (2) JP6539363B2 (enExample)

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP7311245B2 (ja) 2018-03-07 2023-07-19 トヨタ自動車株式会社 マスタ装置、マスタ、制御方法、プログラム及び車両
US11354406B2 (en) * 2018-06-28 2022-06-07 Intel Corporation Physics-based approach for attack detection and localization in closed-loop controls for autonomous vehicles
WO2020021715A1 (ja) * 2018-07-27 2020-01-30 パナソニック インテレクチュアル プロパティ コーポレーション オブ アメリカ 不正対処方法、不正対処装置および通信システム
WO2020066109A1 (ja) 2018-09-27 2020-04-02 富士フイルム株式会社 断層画像生成装置、方法およびプログラム
JP7124679B2 (ja) * 2018-12-07 2022-08-24 トヨタ自動車株式会社 監視装置
WO2020162075A1 (ja) * 2019-02-08 2020-08-13 パナソニック インテレクチュアル プロパティ コーポレーション オブ アメリカ 異常判定方法、異常判定装置およびプログラム
US11700270B2 (en) * 2019-02-19 2023-07-11 The Aerospace Corporation Systems and methods for detecting a communication anomaly
DE102019204452A1 (de) * 2019-03-29 2020-10-01 Robert Bosch Gmbh Verfahren und Vorrichtung zum Betreiben eines Steuergerätes in einem Verbund von Steuergeräten
US11849324B2 (en) 2019-09-30 2023-12-19 Autonetworks Technologies, Ltd. Detection device, vehicle, detection method, and detection program
US11870789B2 (en) * 2019-09-30 2024-01-09 Autonetworks Technologies, Ltd. Detection device, vehicle, detection method, and detection program
JP7361303B2 (ja) * 2019-11-20 2023-10-16 パナソニックＩｐマネジメント株式会社 車両診断装置、車両診断システム及び移動体診断装置
US20220407868A1 (en) * 2019-12-05 2022-12-22 Sumitomo Electric Industries, Ltd. Detection device, vehicle, detection method, and detection program
EP4084418B1 (en) 2019-12-23 2026-06-24 Panasonic Intellectual Property Corporation of America Determination method, determination system and program
WO2021229694A1 (ja) * 2020-05-12 2021-11-18 日本電信電話株式会社 攻撃検知装置、攻撃検知方法及びプログラム
JP7605208B2 (ja) * 2020-05-18 2024-12-24 株式会社オートネットワーク技術研究所 検知装置、車両、検知方法および検知プログラム
CN111726774B (zh) 2020-06-28 2023-09-05 阿波罗智联(北京)科技有限公司 防御攻击的方法、装置、设备及存储介质
WO2022014027A1 (ja) 2020-07-17 2022-01-20 三菱電機株式会社 通信許可リスト生成装置、通信許可リスト生成方法、及び、プログラム
KR102503783B1 (ko) * 2020-10-08 2023-02-28 주식회사 에스엔티웍스 재구성 가능한 장치 기반의 차량 내부 네트워크 이상 신호 실시간 탐지장치 및 그 제어방법
DE102021112329A1 (de) * 2021-05-11 2022-11-17 Bayerische Motoren Werke Aktiengesellschaft Verfahren zum Erkennen einer Manipulation einer Nachricht eines Bussystems durch ein Steuergerät eines Fahrzeugs, computerlesbares Medium, System, und Fahrzeug
US12184668B2 (en) * 2021-06-23 2024-12-31 Intel Corporation Post-gateway bus-off attack mitigation
CN113589793B (zh) * 2021-07-30 2022-07-22 中汽院(重庆)汽车检测有限公司 汽车总线网络设计安全检测方法
US11985146B2 (en) 2021-09-29 2024-05-14 Bank Of America Corporation System and methods for proactive protection against malfeasant data collection
CN116192991B (zh) * 2021-11-26 2025-07-22 广州汽车集团股份有限公司 一种汽车总线复用报文的传输处理方法及系统
EP4718255A1 (en) * 2024-09-27 2026-04-01 Eve Energy Co., Ltd. Method for processing an event message in an in-vehicle network, and in-vehicle can bus network

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7891004B1 (en) * 1999-10-06 2011-02-15 Gelvin David C Method for vehicle internetworks
US8677505B2 (en) * 2000-11-13 2014-03-18 Digital Doors, Inc. Security system with extraction, reconstruction and secure recovery and storage of data
US7386611B2 (en) * 2002-12-10 2008-06-10 International Business Machines Corporation Apparatus and methods for co-location and offloading of web site traffic based on traffic pattern recognition
US20050096944A1 (en) * 2003-10-30 2005-05-05 Ryan Shaun P. Method, system and computer-readable medium useful for financial evaluation of risk
EP1768031A1 (en) * 2004-07-09 2007-03-28 Intelligent Wave Inc. Unauthorized connection detection system and unauthorized connection detection method
EP1616746B1 (en) * 2004-07-15 2010-02-24 Hitachi, Ltd. Vehicle control system
US9215244B2 (en) * 2010-11-18 2015-12-15 The Boeing Company Context aware network security monitoring for threat detection
US9037852B2 (en) * 2011-09-02 2015-05-19 Ivsc Ip Llc System and method for independent control of for-hire vehicles
US20140309864A1 (en) * 2013-04-15 2014-10-16 Flextronics Ap, Llc Configurable Dash Display Based on Detected Location and Preferences
JP5637190B2 (ja) * 2012-07-27 2014-12-10 トヨタ自動車株式会社 通信システム及び通信方法
JP5919205B2 (ja) * 2013-01-28 2016-05-18 日立オートモティブシステムズ株式会社 ネットワーク装置およびデータ送受信システム
US10037689B2 (en) * 2015-03-24 2018-07-31 Donald Warren Taylor Apparatus and system to manage monitored vehicular flow rate
WO2014182638A2 (en) * 2013-05-04 2014-11-13 Christopher Decharms Mobile security technology
US9288048B2 (en) * 2013-09-24 2016-03-15 The Regents Of The University Of Michigan Real-time frame authentication using ID anonymization in automotive networks
US9401923B2 (en) * 2013-10-23 2016-07-26 Christopher Valasek Electronic system for detecting and preventing compromise of vehicle electrical and control systems
US10369942B2 (en) * 2014-01-06 2019-08-06 Argus Cyber Security Ltd. Hosted watchman
US9898759B2 (en) * 2014-03-28 2018-02-20 Joseph Khoury Methods and systems for collecting driving information and classifying drivers and self-driving systems
US10824720B2 (en) * 2014-03-28 2020-11-03 Tower-Sec Ltd. Security system and methods for identification of in-vehicle attack originator
US9792656B1 (en) * 2014-05-20 2017-10-17 State Farm Mutual Automobile Insurance Company Fault determination with autonomous feature use monitoring
WO2017021970A1 (en) * 2015-08-06 2017-02-09 Tower-Sec Ltd Means and methods for regulating can communication
US10230745B2 (en) * 2016-01-29 2019-03-12 Acalvio Technologies, Inc. Using high-interaction networks for targeted threat intelligence
US10142358B1 (en) * 2016-02-29 2018-11-27 Symantec Corporation System and method for identifying an invalid packet on a controller area network (CAN) bus

Also Published As

Publication number Publication date
EP3609138A1 (en) 2020-02-12
US20190149561A1 (en) 2019-05-16
US11438350B2 (en) 2022-09-06
US10986105B2 (en) 2021-04-20
JP2018182724A (ja) 2018-11-15
JP2019083534A (ja) 2019-05-30
US20210194902A1 (en) 2021-06-24
JP7030046B2 (ja) 2022-03-04
EP3609138A4 (en) 2020-04-22
EP3609138B1 (en) 2024-09-11

Similar Documents

Publication Publication Date Title
JP7030046B2 (ja) 不正通信検知方法、不正通信検知システム及びプログラム
JP7053449B2 (ja) 不正通信検知基準決定方法、不正通信検知基準決定システム及びプログラム
CN109005678B (zh) 非法通信检测方法、非法通信检测系统以及记录介质
CN109076016B (zh) 非法通信检测基准决定方法、决定系统以及记录介质
JP6527647B1 (ja) 不正検知方法、不正検知装置及びプログラム
US11296965B2 (en) Abnormality detection in an on-board network system
US10986008B2 (en) Abnormality detection in an on-board network system
US12244607B2 (en) Selection method, selection system, and recording medium
CN107534560A (zh) 安全装置、攻击检测方法以及程序
JP2018026791A (ja) フレーム伝送阻止装置、フレーム伝送阻止方法及び車載ネットワークシステム
CN117118776A (zh) 异常判定方法、异常判定装置以及程序
WO2018020833A1 (ja) フレーム伝送阻止装置、フレーム伝送阻止方法及び車載ネットワークシステム

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20181225

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20181225

A871 Explanation of circumstances concerning accelerated examination

Free format text: JAPANESE INTERMEDIATE CODE: A871

Effective date: 20181225

A975 Report on accelerated examination

Free format text: JAPANESE INTERMEDIATE CODE: A971005

Effective date: 20181227

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20190219

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20190328

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20190521

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20190607

R150 Certificate of patent or registration of utility model

Ref document number: 6539363

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150