KR101791786B1 - Vehicle security system and operation method - Google Patents

Abstract

The present invention performs emulation for executing a command implemented based on at least one of vehicle running information collected from at least one sensor installed in a vehicle, a CAN message received through a vehicle network, and a CAN packet, And a control method for the CAN system, and a control method for the CAN system, and a control method for the CAN system.

Description

[0001] VEHICLE SECURITY SYSTEM AND OPERATION METHOD [0002]

The present invention relates to a vehicle security system and a method of operating the same, and more particularly, to a vehicle security system and a method of operating the same, A vehicle security system for emulating a CAN packet, comparing a result of the emulation with rule information for vehicle safety management to determine a security level of a CAN message and a CAN packet, and generating a control command corresponding to a security level judgment result; And an operation method thereof.

With the development of information technology (IT) technology, automobile is converging with IT technology, and recently produced automobile is equipped with ECU (Electronic Control Unit), and various ICT technology is applied, , And each of the devices can be electronically controlled.

In addition, most of the vehicle's electric vehicle system is connected to the network via the CAN protocol, and the CAN protocol plays a key role in control of multimedia devices such as an engine, a brake, etc., .

 The ECUs are connected to the CAN communication bus and communicate in a broadcast manner that can only transmit packets to hosts connected to the same network. The CAN communication bus consists of a pair of twisted wires twisted together by two wires. Because of the physical characteristics, the twisted wire is affected at the same time when any electromagnetic field is generated, so there is no influence of the noise source. Therefore, the CAN protocol has strong advantages against external electromagnetic waves and noise, and is used in the electric field system of an automobile.

On the other hand, although the CAN protocol is internationally standardized by the International Organization for Standardization (ISO) and the Society of Automotive Engineers of America (SAE), no security mechanism is applied even though it is an internationally standardized broadcast communication protocol.

 Therefore, the CAN protocol has weaknesses that are vulnerable to data encryption and authentication functions. Based on these weaknesses, an attacker can eavesdrop on the contents of CAN communication and can forge the communication section message, thus causing a problem of cyber attack (hacking).

For example, it is pointed out that the problem of the internal network of the automobile is pointed out based on the hacking experiment using the actual mass-production vehicle, and the research result showing that the automobile can be controlled through the message retransmission attack is also presented.

In such a situation, the connection between the vehicle's electric components and the external network becomes a target of hacking, so security technology to ensure the life of the driver is essential.

Korean Registered Patent No. 1561421 (Oct. 13, 2015), "Security System, Apparatus, and Method Using Additional Code" Korean Patent Publication No. 2013-0076519 (July 31, 2013), "Security System and Security Method of Smart Car" Korean Patent No. 1472896 (Dec. 2014), "Method and apparatus for enhancing security in an in-vehicle communication network &

K. Koscher, A. Czeskis, F. Roesner, S. Patel, and T. Kohno, 'Experimental security analysis of a modern automobile', IEEE Symposium on Security and Privacy, 2010

The present invention emulates a specific program or command when a specific program or command is installed or executed in a vehicle while the vehicle is connected to an external network and monitors the emulation result to detect a specific program or command according to the security level of the safety threat of the driver or passenger Or to wait for approval, to delete and block the command, and to provide a method of operation thereof.

Further, the present invention emulates a CAN message and a CAN packet received through a vehicle network on the basis of vehicle driving information collected from at least one sensor installed in the vehicle, compares the result of the emulation with rule information for vehicle safety management To determine a security level of a CAN message and a CAN packet, and an operation method thereof.

In addition, when the security level of the CAN message and the CAN packet received through the vehicle network is judged to be a security threat of an upper security level for the driver or the passenger, the CAN message and the CAN packet And to provide a vehicle security system and an operation method thereof, which ensure the life of a driver or a passenger.

In addition, when the security level of the CAN message and the CAN packet received through the vehicle network is judged to be a security threat of a lower security level for the driver or the passenger, To generate a control command for transmission to the ECU and execution of a program corresponding to the CAN message and the CAN packet, and an operation method thereof.

The vehicle security system according to the embodiment is implemented based on at least one of vehicle running information collected from at least one sensor installed in the vehicle, CAN message received through the vehicle network, and CAN packet, which is implemented at least temporarily by a computer An emulation executing unit for performing emulation for executing the command; A determination unit for comparing a result of the emulation with rule information for vehicle safety management to determine a security level of the CAN message and the CAN packet; And a control command processing unit for generating a control command corresponding to a result of the determination of the security level of the CAN message and the CAN packet.

The rule information is closure information in which only authorized access is allowed and is at least one of vehicle ethic code, absolute rule, vehicle related law and vehicle related policy . ≪ / RTI >

In addition, the rule information may include an absolute code for each security level for at least one of the vehicle ethics rule, the absolute rule, the vehicle-related regulation, and the vehicle-related policy in response to the vehicle safety management.

As a result of the emulation, the determination unit may determine the security level by comparing the CAN message and the CAN packet with the absolute code.

If the CAN message and the CAN packet correspond to a security threat of an upper security level as a result of the determination of the security level, the control command processing unit may generate a control command for unauthorizing the CAN message and the CAN packet have.

If the CAN message or the CAN packet corresponds to a security threat of a lower security level as a result of the determination of the security level, the control command processing unit may transmit the CAN message And a control command for processing the CAN packet.

In addition, when receiving the approval information of the driver, the control command processing unit may generate an ECU corresponding to the CAN message and the CAN packet, and a control command for executing the program.

A vehicle security system according to an embodiment of the present invention is a method of operating a vehicle security system implemented at least temporarily by a computer, the method comprising: receiving vehicle driving information collected from at least one sensor installed in the vehicle; CAN messages received through a vehicle network; Performing emulation for execution of a command implemented based on at least one of; Comparing the result of the emulation with rule information on vehicle safety management to determine a security level of the CAN message and the CAN packet; And generating a control command corresponding to the determination result of the security level of the CAN message and the CAN packet.

The rule information may include an absolute code for each security level for at least one of the vehicle ethics rules, the absolute rules, the vehicle-related regulations, and the vehicle-related policies in response to the vehicle safety management.

Wherein the step of determining the security level of the CAN message and the CAN packet includes comparing the CAN message and the CAN packet with the absolute code to determine the security level as a result of the emulation, Generating the control command for unauthorizing the CAN message and the CAN packet when any one of the CAN message and the CAN packet corresponds to a security threat of an upper security level as a result of the determination of the security level .

Wherein the step of generating the control command includes the step of, when it is determined that the CAN message and the CAN packet correspond to a security threat of a lower security level as a result of the determination of the security level, Message and a control command to process the CAN packet.

According to the present invention, when a specific program or command is installed or executed in a vehicle while the vehicle is connected to an external network, the emulation result is monitored by emulating a specific program or command, Programs, or commands can be awaited, deleted, and blocked.

According to the present invention, the CAN message and the CAN packet received through the vehicle network are emulated based on the vehicle running information collected from at least one sensor installed in the vehicle, and the result of the emulation is stored in the rule information The security level of the CAN message and the CAN packet can be determined.

According to the present invention, when the security level of the CAN message and the CAN packet received through the vehicle network is judged to be a security threat of an upper security level for the driver or the passenger, It is possible to secure the life of the driver or the passenger by generating a control command for unacknowledging the packet.

According to the present invention, when the security level of the CAN message and the CAN packet received through the vehicle network is judged to be a security threat of a lower security level for the driver or the passenger, Corresponding to the CAN message and the CAN packet, it is possible to generate a control command for transmission to the ECU and execution of the program.

1 is a block diagram illustrating an automotive security system according to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of a car security system according to an embodiment of the present invention.
3 illustrates a CAN frame structure of a CAN message received in a car security system according to an embodiment of the present invention.
4 is a flowchart illustrating an operation method of a car security system according to an embodiment of the present invention.
5 is a flowchart illustrating a method for generating a control command in a car security system according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and accompanying drawings, but the present invention is not limited to or limited by the embodiments.

The terminology used herein is for the purpose of illustrating embodiments and is not intended to be limiting of the present invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. It is noted that the terms "comprises" and / or "comprising" used in the specification are intended to be inclusive in a manner similar to the components, steps, operations, and / Or additions.

As used herein, the terms "embodiment," "example," "side," "example," and the like should be construed as advantageous or advantageous over any other aspect or design It does not.

Also, the term 'or' implies an inclusive or 'inclusive' rather than an exclusive or 'exclusive'. That is, unless expressly stated otherwise or clear from the context, the expression 'x uses a or b' means any of the natural inclusive permutations.

Also, the phrase "a" or "an ", as used in the specification and claims, unless the context clearly dictates otherwise, or to the singular form, .

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terminology used herein is a term used for appropriately expressing an embodiment of the present invention, which may vary depending on the user, the intent of the operator, or the practice of the field to which the present invention belongs. Therefore, the definitions of these terms should be based on the contents throughout this specification.

1 is a block diagram illustrating an automotive security system according to an embodiment of the present invention.

Referring to FIG. 1, an automotive security system 100 according to an embodiment of the present invention includes a plurality of sensors (not shown) installed in a vehicle, when a specific program or command is to be installed or executed in the vehicle while the vehicle is connected to an external network Emulates a specific program or command based on collected vehicle driving information, monitors the emulation result, and waits, deletes, and blocks a specific program or command according to the security level of the safety threat of the driver or passenger.

For example, the automotive security system 100 according to the embodiment of the present invention determines the security level of the CAN message and the CAN packet received through the vehicle network, A control command for recognizing the CAN message and the CAN packet unrecognized as hacking is generated.

That is, when a malicious purpose vehicle diagnostic application that performs a function of transmitting / receiving a CAN message to an attack target vehicle without the consent of an application user is produced and distributed to the attack target vehicle, the vehicle security system according to the embodiment of the present invention The control unit 100 may emulate a CAN message and generate a control command for unauthorized deletion of the CAN message if the emulation results in a security threat of a higher security level.

The vehicle network is a communication network in which nodes such as a controller, a sensor, an actuator, an ABS, an audio system and an engine control system are connected in a vehicle. Many nodes in a vehicle, such as a CAN network, But is not limited to a flexible network that can be used.

In addition, the CAN message can be transmitted and received using a data frame, a remote frame, an error frame, and an overload frame. May be included in a data frame, which is a frame that carries data in the case of a program or command to be emulated through the automotive security system 100 according to an embodiment of the present invention.

Emulation through the automotive security system 100 according to an embodiment of the present invention may be a process of predicting the result of a CAN message or a CAN packet being installed or executed in a real vehicle in a virtualization platform.

In addition, when the automobile security system 100 according to the embodiment of the present invention determines the security level of the CAN message and the CAN packet received through the vehicle network and corresponds to a safety threat of a lower security level for the driver or the passenger The message and program execution can be controlled according to the received information on whether or not the driver is authorized.

For example, when the automotive security system 100 according to the embodiment of the present invention receives reception information for approving execution of a message or a program from a driver, the automotive security system 100 transmits a control command And transmits a corresponding message to an ECU (Electronic Control Unit) corresponding to the CAN message and the CAN packet based on the generated control command, or controls the execution of the program.

On the other hand, the automotive security system 100 according to the embodiment of the present invention includes a control command (not shown) for controlling the deletion or non-installation of a message or a program in response to received information, Lt; / RTI >

The vehicle running information collected from at least one sensor installed in the vehicle may include at least one of startup related information related to the state of the vehicle, speed related information, steering angle related information, hating related information, and location related information. For example, the vehicle running information may include at least one of a vehicle engine or component collected through a sensor installed in a vehicle or installed as a separate stand-alone, a signal to the outside of the vehicle, A signal, and a vehicle operation related signal of the vehicle user. According to an embodiment, the at least one sensor may be installed in an OBD black box.

The vehicle behavior related signal may include data of at least one of lateral acceleration data and longitudinal acceleration data, and the vehicle operation related signal of the vehicle user may include a brake, a speedometer, a turn signal lamp, a gear selection position, And the engine and vehicle component related signals may include data for either RPM, speed, and engine oil status.

The car security system 100 according to the embodiment of the present invention may process the vehicle running information collected from at least one sensor as data of a form suitable for each signal domain.

The automotive security system 100 according to the embodiment of the present invention may be installed in the form of software in the vehicle or may be installed in the vehicle as an independent device.

Hereinafter, referring to FIG. The components of the car security system 100 according to the embodiment of the present invention will be described in detail.

2 is a block diagram illustrating a configuration of a car security system according to an embodiment of the present invention.

Referring to FIG. 2, an automotive security system 100 according to an embodiment of the present invention includes an emulation performing unit 110, a determining unit 120, and a control command processing unit 130.

The emulation performing unit 110 performs emulation for executing the vehicle driving information collected from at least one sensor installed in the vehicle and the command implemented based on one of the CAN message and the CAN packet received through the vehicle network.

The vehicle running information is information collected from at least one or more sensors installed in the vehicle and may include at least one of startup related information, speed related information, steering angle related information, hating related information, and location related information.

For example, the vehicle running information may include at least one of a vehicle engine or component collected through a sensor installed in the vehicle or installed as a separate independent device, a signal to the outside of the vehicle, a signal related to the behavior of the vehicle, And may include an operation related signal. The vehicle behavior related signal may include data of at least one of lateral acceleration data and longitudinal acceleration data, and the vehicle operation related signal of the vehicle user may include a brake, a speedometer, a turn signal lamp, a gear selection position, And the engine and vehicle component related signals may include data for either RPM, speed, and engine oil status.

The determination unit 120 determines the security level of the CAN message and the CAN packet by comparing the emulation result value from the emulation performing unit 110 with the rule information on the vehicle safety management.

The control command processing unit 130 generates a control command corresponding to the result of determining the security level of the CAN message and the CAN packet from the determination unit 120. [

The rule information may include at least one of vehicle ethic code, absolute rule, vehicle related law and vehicle related policy, and only authorized access may be used It may be acceptable closure information.

The rule information may be an absolute code for each security level for at least one of vehicle ethics regulations, absolute rules, vehicle-related regulations, and vehicle-related policies in response to vehicle safety management.

The determination unit 120 compares the execution result of the emulation with the rule information, and when it is determined that the security level of the security level of the driver or the passenger corresponds to the safety threat of the security level of the driver or the passenger, And generates an unauthorized control command.

For example, when the received CAN message or CAN packet is determined to be the result of the emulation of 'start-off off' during running, the determination unit 120 compares the received information with the rule information that the startup can not be turned off during running, It can be judged to correspond to the security threat of the higher security level. That is, the determination unit 120 can determine that the external intrusion or hacking has an upper security level.

In this case, the control command generation unit 130 may generate a control command for unauthorizing the CAN message and the CAN packet. If the emulation results in a security threat of the upper security level as described above, the control command generation unit 130 may generate a CAN message It is possible to generate a control command for unauthorized deletion.

According to an embodiment, it is possible to recognize a warning message or warning notification to the driver, and to generate a control command that causes the CAN message and the CAN packet to be unauthorized and not executed in the ECU.

On the other hand, when the received CAN message or the CAN packet is determined as a result of the emulation of the 'folding of the side mirror during running', the judging unit 120 compares the rule information that 'the side mirror should not be folded during traveling' According to the status, it can be judged that it corresponds to the security threat of the lower security level. That is, the determination unit 120 may determine that the user is an intrusion or hacking of a lower security level.

According to an embodiment, the rule information may be classified into an upper security level and a lower security level corresponding to a vehicle safety management according to a standard that threatens the safety of a driver or a passenger, or may be divided into at least two or more have.

The control command processing unit 130 recognizes a warning message or an alert notification to the driver when any one of the CAN message and the CAN packet corresponds to a security threat of a lower security level, It is possible to wait for the reception information of the driver's approval or not.

The reception information on the approval or disapproval of the driver may be at least one of touch information, voice command information, and gesture information through the touch screen, and may include various types of information that can be input from the driver in the vehicle .

The control command processing unit 130 may generate a control command for processing the CAN message and the CAN packet in response to the reception information received from the driver.

For example, when the approval information is received from the driver, the control command processing unit 130 generates a control command for transmitting the CAN message and the CAN packet to the ECU or executing the program. On the other hand, when the unauthorized person's information is received from the driver, the control command processing unit 130 generates a control command for unauthorized processing of the CAN message and the CAN packet to delete or reject the CAN message and the CAN packet.

3 illustrates a CAN frame structure of a CAN message received in a car security system according to an embodiment of the present invention.

As described above, the automobile security system according to the embodiment of the present invention can emulate a CAN message and generate a control command for unauthorized deletion of the CAN message if the emulation results in a security threat of an upper security level.

The vehicle network is a communication network in which nodes such as a controller, a sensor, an actuator, an ABS, an audio system, and an engine control system are connected in a vehicle. It can be a flexible communication network in which many nodes in a vehicle, such as a CAN network, have.

CAN is a multi-master network and can use CSMA / CD + AMP. CAN determines whether the CAN bus line is in use before sending a message to the CAN node, and performs collision detection between CAN messages.

A message sent from a certain node (system) may not include the address of the sender or recipient, but may include a unique identifier for each node to identify each node on the CAN network in the data message item of each node .

Referring to FIG. 3, the identifier may be located at the beginning of the CAN message.

After all the nodes connected to the network have received the message on the network, it evaluates through the identifier whether it is a necessary message, selects only the message of the identifier required by the user, and ignores the message if not.

Depending on the priority of the identifier, high priority messages are guaranteed to be used by the CAN bus, and low priority messages can be automatically retransmitted to the next bus cycle. That is, the identifier may assign a role of identifying a message type and a priority of a message.

The CAN message can be transmitted and received using a data frame, a remote frame, an error frame, and an overload frame. Through the automobile security system according to the embodiment of the present invention, the program or command to be emulated can be distinguished through the identifier, and the program or command can be included in the data frame.

Emulation through the automotive security system 100 according to an embodiment of the present invention may be a process of predicting the result of a CAN message or a CAN packet being installed or executed in a real vehicle in a virtualization platform.

4 is a flowchart illustrating an operation method of a car security system according to an embodiment of the present invention.

Referring to FIG. 4, in step S410, an emulation for executing a command implemented based on at least one of the vehicle running information collected from at least one sensor installed in the vehicle, the CAN message received through the vehicle network, and the CAN packet .

The vehicle running information is information collected from at least one or more sensors installed in the vehicle, and may include startup related information, speed related information, steering angle related information, hating related information, and location related information.

For example, the vehicle running information may include at least one of a vehicle engine or component collected through a sensor installed in the vehicle or installed as a separate independent device, a signal to the outside of the vehicle, a signal related to the behavior of the vehicle, And may include an operation related signal. The vehicle behavior related signal may include data of at least one of lateral acceleration data and longitudinal acceleration data, and the vehicle operation related signal of the vehicle user may include a brake, a speedometer, a turn signal lamp, a gear selection position, And the engine and vehicle component related signals may include data for either RPM, speed, and engine oil status.

Thereafter, in step S420, the result of the emulation is compared with rule information on vehicle safety management to determine the security level of the CAN message and the CAN packet. In step S430, the CAN message and the CAN packet are compared And generates and processes a control command.

The rule information may include at least one of a vehicle ethics rule, an absolute rule, a vehicle-related regulation, and a vehicle-related policy, and may be closed information that permits only authorized access.

According to an embodiment, the rule information may be classified into an upper security level and a lower security level corresponding to a vehicle safety management according to a standard that threatens the safety of a driver or a passenger, or may be divided into at least two or more have.

Hereinafter, a method of generating the control command in step 430 will be described in detail with reference to FIG.

5 is a flowchart illustrating a method for generating a control command in a car security system according to an embodiment of the present invention.

Referring to FIG. 5, it is determined whether the CAN message and the CAN packet received in step S510 are high-level security threats. If it is determined that the security threat is a high-grade security threat, the control message .

According to an embodiment, step S540 may include the step of recognizing the driver through a warning indication or an alert notification, and generating a control command that causes the CAN message and the CAN packet to be unauthorized and not performed in the ECU.

On the other hand, if it is determined that the CAN message and the CAN packet received in step S510 are safety threats of an upper level, if the security threat is not a high-level security threat, the safety threats of the CAN message and the CAN packet received in step S520 , And receives information on whether or not the driver is authorized.

If the driver's approval information is received in step S520, the CAN message and the CAN packet are transmitted to the ECU in step S530, and a control command for executing the program is generated.

On the other hand, if unauthorized person information of the driver is received in step S520, a control command is generated to prevent the CAN message and the CAN packet from being processed by unauthorized processing of the CAN message and the CAN packet in step S540.

The reception information on the approval or disapproval of the driver may be at least any one of touch information, voice command information, and gesture information through the touch screen. However, the reception information may include various types of information that the driver can input in the vehicle .

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks, and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (10)

Which is at least temporarily embodied by an in-vehicle device:
An emulation for executing a command implemented based on at least one of a vehicle traveling information collected from at least one sensor installed in a vehicle, a CAN (Controller Area Network) message received through a vehicle network, and a CAN packet An emulation performing unit;
A determination unit for comparing a result of the emulation with rule information for vehicle safety management to determine a security level of the CAN message and the CAN packet; And
A control command processing unit for generating a control command corresponding to a result of the determination of the security level of the CAN message and the CAN packet,
, ≪ / RTI &
Wherein,
Comparing the CAN message and the CAN packet with an absolute code according to the security level to determine the security level as a result of the emulation,
The control command processing unit,
And generates a control command for unauthorizing the CAN message and the CAN packet if any one of the CAN message and the CAN packet corresponds to a security threat of an upper security level as a result of the determination of the security level. The method according to claim 1,
The rule information
Vehicle ethic code, absolute rule, vehicle-related law, and vehicle-related policy,
Wherein only authorized accesses are allowed closure information. 3. The method of claim 2,
The rule information
Wherein the absolute code is an absolute code for each security level for at least one of the vehicle ethics rule, the absolute rule, the vehicle-related regulations, and the vehicle-related policy in response to the vehicle safety management. delete The method according to claim 1,
The control command processing unit,
If it is determined that the CAN message or the CAN packet is a security threat of a lower security level as a result of the determination of the security level, the CAN message and the CAN packet are processed in response to the received information on whether the driver is authorized And generates a control command. 6. The method of claim 5,
The control command processing unit,
And generates control commands for at least one of transmission to the ECU and program execution corresponding to the CAN message and the CAN packet when the approval information of the driver is received. CLAIMS What is claimed is: 1. A method of operating a vehicle security system implemented at least temporarily by an in-vehicle device comprising:
Performing emulation for execution of a command implemented based on at least one of vehicle running information collected from at least one sensor installed in a vehicle, CAN message received through a vehicle network, and CAN packet;
Comparing the result of the emulation with rule information on vehicle safety management to determine a security level of the CAN message and the CAN packet; And
Generating the CAN message and the CAN packet with a control command corresponding to the determination result of the security level
, ≪ / RTI &
Wherein the step of determining the security level of the CAN message and the CAN packet comprises:
Comparing the CAN message and the CAN packet with an absolute code according to the security level to determine the security level as a result of the emulation
Lt; / RTI >
Wherein the step of generating a control command comprises:
Generating a control command for unacknowledging the CAN message and the CAN packet if any one of the CAN message and the CAN packet corresponds to a security threat of an upper security level as a result of the determination of the security level;
The method comprising the steps of: 8. The method of claim 7,
The rule information
Vehicle ethic code, absolute rule, vehicle-related law, and vehicle-related policy,
Wherein only authorized access is permitted information. ≪ RTI ID = 0.0 > 8. < / RTI > 9. The method of claim 8,
The rule information
Wherein the absolute code is an absolute code for at least one of the vehicle ethics rule, the absolute rule, the vehicle-related regulation, and the vehicle-related policy in response to the vehicle safety management. 8. The method of claim 7,
Wherein the step of generating a control command comprises:
If it is determined that the CAN message or the CAN packet is a security threat of a lower security level as a result of the determination of the security level, the CAN message and the CAN packet are processed in response to the received information on whether the driver is authorized And generating a control command based on the control command.

Images