KR20190070491A - Electronic device, electronic system and controlling method thereof - Google Patents

Abstract

An electronic device, an electronic system, and control method thereof are disclosed. According to the present invention, the electronic device comprises: a sensor for sensing a state of the electronic device and generating sensing data; a processor for generating transmission data by inserting a predetermined padding data between the generated sensing data and encoding the inserted sensing data; and a communication interface for transmitting the generated transmission data.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an electronic apparatus,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic apparatus and a control method, and more particularly, to an electronic apparatus, an electronic system, and a control method for judging whether or not a signal transmitted to a network is maliciously attacked.

There are many electronic devices around us, and many electronic devices transmit data through wired and wireless communication. In the factory, automation process is carried out using a robot or the like. One electronic device senses the state of the electronic device or its surroundings through many sensors, and transmits the sensed sensing signal to a server or other electronic device. An attacker may also conduct a malicious attack on a transmitted signal to malfunction an electronic device.

Conventionally, a state estimation method capable of accurately estimating the state of an electronic device and stabilizing the system even with a plurality of sensor attacks by an attacker has been proposed. Conventional systems can consist of electronic devices (e.g., drone, robot, vehicle) and p sensors, a state observer corresponding to each sensor, and RSE (Resilient State Estimation). The p sensors can measure the output of the electronic device. The sensed values measured by each sensor are transmitted over the network. Since the network may be subject to malicious attacks, the transmitted sensing value may change. Since the conventional system can not determine which sensor among the p sensors is attacked, it is assumed that the attack of the attacker is limited to less than p / 2 for correct state estimation.

That is, the conventional system has a problem that correct state estimation can not be performed for attack of p / 2 or more sensors, so there is a need for a technique capable of correct state estimation regardless of the number of attacked sensors.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and it is an object of the present invention to provide an electronic apparatus, an electronic system, and a control method for inserting a padding signal into a transmission signal and detecting an inserted padding signal .

According to an aspect of the present invention, there is provided a method of sensing a state of an electronic device, the method including sensing a state of an electronic device to generate sensing data, inserting predetermined padding data between the generated sensing data, And a communication interface for transmitting the generated transmission data.

The predetermined padding data has a predetermined size and may be inserted between the sensing data at a predetermined time.

According to an embodiment of the present disclosure for achieving the above object, an electronic device includes a communication interface for receiving transmission data from an external electronic device, and a processor for decoding the received transmission data, Determines the state of the external electronic device based on the sensing data, and determines whether the transmission data is attacked based on the padding data.

The processor may determine whether the identified padding data is identical to the predetermined padding data, and may determine that the transmitted data is attacked if the identified padding data and the predetermined padding data are not identical .

In addition, when the processor determines that the transmission data has been attacked, the processor may remove information on the determined state of the external electronic device.

According to an aspect of the present invention, there is provided a method for generating sensing data by sensing a state of a first electronic device, inserting predetermined padding data between the generated sensing data, A first electronic device for transmitting the generated transmission data to a second electronic device and a second electronic device for receiving the transmission data from the first electronic device, Determining the state of the first electronic device based on the sensing data, and determining a state of the first electronic device based on the padding data, And judges whether or not it is an attack.

According to another aspect of the present invention, there is provided a method of controlling an electronic device, including the steps of generating sensed data by sensing a state of the electronic device, generating predetermined padding data between the generated sensed data, And generating transmission data by inserting and encoding the generated transmission data, and transmitting the generated transmission data.

The predetermined padding data has a predetermined size and may be inserted between the sensing data at a predetermined time.

According to one embodiment of the present disclosure for achieving the above object, a method of controlling an electronic device includes receiving transmission data from an external electronic device, decoding the received transmission data, Identifying sensing data and padding data, determining a state of the external electronic device based on the sensing data, and determining whether to attack the transmission data based on the padding data.

If the identified padding data and the predetermined padding data are not the same, the determining step determines that the transmitted data is attacked .

The control method of the electronic device may further include removing information on the determined state of the external electronic device when it is determined that the transmission data is attacked.

As described above, according to various embodiments of the present disclosure, an electronic device, an electronic system, and a control method can estimate a correct state when only one sensor among a plurality of sensors is not attacked.

In addition, the electronic device, the electronic system, and the control method can establish a stable control system in response to a malicious attack on an electronic device of a main facility.

1 is a diagram illustrating an electronic system according to an embodiment of the present disclosure;
2A and 2B are block diagrams of an electronic device according to one embodiment of the present disclosure.
3 is a block diagram of an electronic system according to one embodiment of the present disclosure;
4A is a diagram illustrating sensing data according to an embodiment of the present disclosure.
4B is a diagram showing data to be transmitted after encoding according to an embodiment of the present disclosure;
5A is a diagram illustrating transmitted data including an attacked area according to one embodiment of the present disclosure.
5B is a diagram showing the sensing data after decoding according to an embodiment of the present disclosure.
5C is a diagram illustrating padding data after decoding according to one embodiment of the present disclosure.
6 is a flowchart of a method of controlling a transmitting-side electronic device according to an embodiment of the present disclosure.
7 is a flowchart of a method of controlling a receiving-side electronic device according to an embodiment of the present disclosure.

Various embodiments will now be described in detail with reference to the accompanying drawings. The embodiments described herein can be variously modified. Specific embodiments are described in the drawings and may be described in detail in the detailed description. It should be understood, however, that the specific embodiments disclosed in the accompanying drawings are intended only to facilitate understanding of various embodiments. Accordingly, it is to be understood that the technical idea is not limited by the specific embodiments disclosed in the accompanying drawings, but includes all equivalents or alternatives falling within the spirit and scope of the invention.

 Terms including ordinals, such as first, second, etc., may be used to describe various elements, but such elements are not limited to the above terms. The above terms are used only for the purpose of distinguishing one component from another.

In this specification, the terms "comprises" or "having ", and the like, are intended to specify the presence of stated features, integers, steps, operations, elements, parts, or combinations thereof, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof. It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

In the meantime, "module" or "part" for components used in the present specification performs at least one function or operation. Also, "module" or "part" may perform functions or operations by hardware, software, or a combination of hardware and software. Also, a plurality of "modules" or a plurality of "parts ", other than a" module "or" part " which is to be performed in a specific hardware or performed in at least one control section, may be integrated into at least one module. The singular expressions include plural expressions unless the context clearly dictates otherwise.

In addition, in the description of the present invention, when it is judged that the detailed description of known functions or constructions related thereto may unnecessarily obscure the gist of the present invention, the detailed description thereof will be abbreviated or omitted.

1 is a diagram illustrating an electronic system according to an embodiment of the present disclosure;

Referring to Figure 1, an electronic system 1000 includes a plurality of electronic devices 11, 12, 13 and a receiving electronic device 100b. For example, the plurality of electronic devices 11, 12, 13 may include an industrial robot, a home robot, a military robot, a car, a drone, and the like. The receiving-side electronic device 100b may include a cellular phone, a notebook computer, a tablet PC, a wearable device, a PDA, a server, a desktop computer, a digital signage, and the like.

The plurality of electronic devices 11, 12, 13 may include one or more sensors. Sensors included in the electronic devices 11, 12, and 13 can generate sensing data by sensing information such as the state of the electronic device, the surrounding environment, and the like. The electronic devices 11, 12, 13 may encode the sensing data together with the sensor identification information. The electronic devices 11, 12, and 13 may transmit the encoded sensor identification information and sensing data to the receiving-side electronic device 100b using a wire / wireless communication method.

The receiving-side electronic device 100b can decode the data transmitted from the electronic device 11, 12, 13. The receiving-side electronic device 100b can identify the sensor identification information and the sensing data from the decoded data. The receiving-side electronic device 100b can determine the state of the sensor based on the identified sensor identification information and sensing data. Determining the state of the sensor may be to determine the state of the electronic device including the sensor.

Generally, the electronic devices 11, 12, and 13 transmit normal sensing data, and the receiving electronic device 100b receives normal sensing data to determine the state of the sensor (or the state of the electronic device). However, the attacker may attempt to attack the sensor or the sensing data transmitted on the network. The sensor or sensing data attacked by the attacker may contain error information. Therefore, the receiving-side electronic device 100b needs to identify the attack or attack by the attacker and the sensor or sensing data in which the error occurred based on the received sensing data. However, in the case of the prior art, it is restricted to judge an attack on a sensor or sensing data at a certain rate or more. However, the present disclosure has an advantage that an attack against a large number of sensors or sensing data can be accurately determined when one normal sensing data exists. A block diagram of an electronic device of the present disclosure will be described below.

2A and 2B are block diagrams of an electronic device according to one embodiment of the present disclosure.

Referring to FIG. 2A, an electronic device 100a includes a sensor 110, a processor 120, and a communication interface 130. As shown in FIG. The electronic device 100a shown in Figure 2A may be a transmitting electronic device. Alternatively, the electronic device may include both a sender function and a receiver function, and the block diagram of the electronic device shown in Fig. 2A may be a block diagram related to the sender function.

The sensor 110 senses the state of the electronic device 100a to generate sensing data. Alternatively, the sensor 110 may sense the surrounding environment of the electronic device 100a to generate sensing data. The sensor 110 may include a plurality of sensors. For example, the sensor 110 may be an RGB sensor, an optical sensor, a touch sensor, a fingerprint sensor, a proximity sensor, an acceleration sensor, a gravity sensor, a gyroscope sensor, a motion sensor, A biometric sensor including a barometer, a hygrometer, a thermometer, a radiation detection sensor, a heat detection sensor, a gas detection sensor, and an iris recognition sensor.

The processor 120 inserts and encodes predetermined padding data between the generated sensing data. The predetermined padding data may be data having a predetermined size, and may be inserted into the sensing data at a predetermined time. For example, the transmitting electronic device 100a and the receiving electronic device may share information about the padding data. If the receiving-side electronic device can expect that the k1-th padding data is 2, and the actual k1-th padding data is 2, the receiving-side electronic device can judge that there is no attack. Alternatively, the receiving-side electronic device may expect the padding data at time t2 to be ten, and if the padding data at time t2 actually is ten, the receiving-side electronic device may determine that there is no attack. Accordingly, even if the padding data is inserted at any time and at any size, it is possible to determine whether or not the padding data is an attack if the receiving electronic device is of a predictable time and size.

On the other hand, the predetermined padding data may be data having the same size, and may be inserted between sensing data at regular intervals. In one embodiment, one padding data may be inserted between sensing data, and two or more padding data may be inserted. That is, as described above, the size and insertion time of the padding data can be arbitrarily set according to the electronic device. The size and insertion period of the padding data may be set differently according to the electronic device 100a. The processor 120 encodes the sensing data into which the padding data is inserted to generate transmission data.

The communication interface 130 transmits the generated transmission data to an external electronic device (e.g., a receiving electronic device). The transmission data can be transmitted to an external electronic device according to a wired / wireless communication scheme. For example, the wireless communication method may include CDMA, GSM, LTE, Wi-Fi, WLAN, Bluetooth, RFID, infrared communication, ZigBee, NFC, The external electronic device may receive the transmission data and determine whether the transmission data on the sensor or the network has been attacked by the attacker.

Referring to FIG. 2B, the electronic device 100b includes a communication interface 140 and a processor 150. The electronic device 100b shown in Fig. 2B may be a receiving electronic device. Alternatively, the electronic device may include both a sender function and a receiver function, and the block diagram of the electronic device shown in Fig. 2B may be a block diagram related to the receiver function.

The communication interface 140 receives the transmission data from the external electronic device (or the transmission-side electronic device). As described above, the communication interface 140 can receive transmission data using a wired / wireless communication scheme.

The processor 150 decodes the received transmission data. Then, the processor 150 identifies the sensing data and the padding data from the decoded transmission data. As described above, the sensing data refers to data obtained by sensing the state of the electronic device or the surrounding environment by the sensor. The padding data refers to data inserted between sensing data to determine whether or not the attacker is attacked.

The processor 150 determines the status of the external electronic device or the environment of the external electronic device based on the sensed data. Then, the processor 150 determines whether the transmission data is an attack based on the padding data. The attack on the transmitted data may include an attack on the electronic device. Processor 150 may determine whether the identified padding data and the predetermined padding data are the same. The predetermined padding data can be shared in advance between the transmitting-side electronic device and the receiving-side electronic device. Alternatively, the processor 150 may consider the padding data having a constant size and period of the padding data included in the sensing data of the other sensor to be predetermined padding data. Alternatively, when there are a plurality of unacknowledged sensing data, the padding data included in the unacknowledged sensing data are the same. Accordingly, the processor 150 may regard padding data having the same size and period among the plurality of identified padding data as predetermined padding data. Meanwhile, as described above, the predetermined padding data has a predetermined size and can be inserted between the sensing data at a predetermined time. The processor 150 may then determine whether the padding data of a predetermined time and size is the same as the expected padding data.

If the identified padding data and the predetermined padding data are not the same, the processor 150 may determine that the transmitted data is attacked. If the processor 150 determines that the transmission data has been attacked, the processor 150 may remove information on the determined state of the external electronic device (or information on the surrounding environment of the external electronic device). That is, if the processor 150 determines that the transmission data is attacked, the processor 150 may not use the determined information.

The transmission data may be transmitted to the receiving-side electronic device 100b via different networks depending on the sensor (or electronic device). Thus, the processor 150 can identify the attacked sensor (or electronic device) based on the network on which the transmitted data is received. In another embodiment, the received transmission data may include sensor identification information. Accordingly, the processor 150 may identify the attacked sensor (or electronic device) based on the sensor identification information of the attacked transmission data. Alternatively, the identification information of the sensor may be modified by an attack by an attacker. The processor 150 may identify the normal sensor (or electronic device) based on the sensor identification information of the undisturbed transmission data and may identify the sensor (or electronic device) ). ≪ / RTI >

In the following, a specific example for determining whether or not an attack is made will be described.

3 is a block diagram of an electronic system according to one embodiment of the present disclosure;

Referring to FIG. 3, the electronic system may include a transmitting electronic device 100a and a receiving electronic device 100b. In one embodiment, the transmitting electronic device may be a plant, and the plant may include an industrial robot, a home robot, a military robot, a car, a drone, and the like. The plant may include a plurality of sensors. A plurality of sensors can generate sensing data of y1, y2, ..., yp, respectively. The sensing data may be individually encoded. The encoding is for determining whether or not the sensor is attacked, and may be a process of inserting predetermined padding data? 1,? 2, ...,? P. The transmitting-side electronic device 100a can generate transmission data of f1, f2, ..., fp through an encoding process. The transmission data may be transmitted to the receiving-side electronic device 100b in a different network. Alternatively, the transmission data may be transmitted to the same network including the identification information of the sensor.

The transmitted data may be added to the transmitted data by a malicious attack on the network, such as a1, a2, ..., ap. Transmission data modified by malicious attack can be expressed as w1, w2, ... wp.

The receiving-side electronic device 100b can decode the respective transmission data. Then, the reception-side electronic device 100b can separate the received transmission data into the sensing data w1y, w2y, ..., wpy and the padding data w1ρ, w2ρ, ..., wpρ. The processor of the receiving electronic device 100b may include a state observer and Resilient State Estimation (RSE). Each state observer can estimate the state of the plant using the restored sensed data w1y, w2y, ..., wpy and the control input u. Then, the RSE can estimate the correct state of the plant based on the restored padding data w1ρ, w2ρ, ..., wpρ. If the restored padding data is different from the expected data (eg, ρi + ai ≠ ρi), the RSE determines that the i sensor (or i transmission data) has been attacked and does not use the estimated state from the state observer. According to the present disclosure, the RSE can estimate the correct state even in an attack against p-1 sensors (or transmission data).

A method for determining whether or not an attack is based on data according to an embodiment will be described below.

4A is a diagram illustrating sensing data according to an embodiment of the present disclosure.

Referring to FIG. 4A, the sensing data measured through the i-th sensor is shown. The i-th sensor can generate sensing data by sampling at period T. That is, the i-th sensor can generate sensing data of yi1 at T, yi2 at 2T, yi3 at 3T, yi4 at 4T, and yi5 at 5T.

The transmitting-side electronic device can perform the encoding process by inserting the padding data into the sensing data.

4B is a diagram showing data to be transmitted after encoding according to an embodiment of the present disclosure;

Referring to FIG. 4B, a padding data inserted signal is shown. The padding data inserted in the i-th sensing data may be p i. And, the padding data can be inserted in a certain size between the sensing data. That is, ρi1 is 1.5T for 1.5T, 2.5i for 2.5T, ρi3 for 3.5T, ρi4 for 4.5T and ρi5 for 5.5T. However, the size and insertion position of the padding data can be appropriately set by the control system designer.

A malicious attacker can attack the i-th sensor or the i-th transmitted data.

5A is a diagram illustrating transmitted data including an attacked area according to one embodiment of the present disclosure.

Referring to FIG. 5A, data that an attacker has attacked the i-th sensor (or i-th transmission data) after ta time is shown. Since the malicious attacker can not know the sampling period T precisely, the influence of the attack can be seen in ρi as well as the sensing data yi. That is, there is no attack influence on the sensing data yi1, yi2, yi3 and the padding data? I1,? I2 before attack. However, after the ta time, the sensing data was transformed to yi4 + ai and yi5 + ai due to the attack effect, and the padding data were transformed into ρi3 + ai, ρi4 + ai and ρi5 + ai.

The receiving-side electronic device can decode the transmission data to identify the sensing data and the padding data.

5B is a diagram showing the sensing data after decoding according to an embodiment of the present disclosure.

Referring to FIG. 5B, the decoded sensing data is shown. The received sensing data is data from which padding data is removed. The received sensing data can be used as data for estimating the state of the sensor (or electronic device) in the state observer.

The received sensing data may include attack effects due to attack after ta time. That is, the received sensing data can be represented as yi1 in T, yi2 in 2T, yi3 in 3T, yi4 + ai in 4T after ta time, and yi5 + ai in 5T.

5C is a diagram illustrating padding data after decoding according to one embodiment of the present disclosure.

Referring to FIG. 5C, the decoded padding data is shown. The decoded padding data can be used as data for attack detection. Then, the padding data can be copied and judged. If the padding data is not the same as the expected data (e.g., p i + a i ≠ p i), the RSE may determine that the transmission data has been attacked on the network.

As shown in FIG. 5C, the padding data may include an attack effect due to an attack after ta time. That is, the received padding data can be represented as ρi1 at 1.5T and ρi2 at 2.5T, ρi3 + ai at 3.5T after ta time, ρi4 + ai at 4.5T, and ρi5 + ai at 5.5T.

Since the padding data after the ta time is not the same as the expected data, the RSE can determine that it has been attacked after the ta time. If the receiving-side electronic device determines that an attack has been received, the state information determined by the state estimator can be ignored.

According to the present disclosure, the receiving-side electronic device can accurately determine which sensor (or transmission data) has been attacked, and can accurately estimate the state even when attacking a sensor of maximum p-1 (or transmission data) have.

Various embodiments of electronic devices have been described so far. A flow chart of the electronic device control method will be described below.

6 is a flowchart of a method of controlling a transmitting-side electronic device according to an embodiment of the present disclosure.

Referring to FIG. 6, the electronic device senses the state of the electronic device to generate sensing data (S610). On the other hand, the electronic device may sense the surrounding environment of the electronic device to generate sensing data.

The electronic device inserts and encodes predetermined padding data between the generated sensing data to generate a transmission data (S620). The encoding process is a process of determining whether the attacker is attacked or not, and may be a process of inserting padding data. The predetermined padding data may have a predetermined size, and may be inserted between sensing data at a predetermined time. However, the padding data may also allow the electronic device designer to appropriately set the size and insertion period of the padding data.

The electronic device transmits the generated transmission data (S630). The transmission data may be received at the receiving electronic device and may be attacked by an attacker on the network.

7 is a flowchart of a method of controlling a receiving-side electronic device according to an embodiment of the present disclosure.

Referring to FIG. 7, the electronic device receives the transmission date from the external electronic device (S710). The external electronic device may be a transmitting electronic device including a sensor.

The electronic device decodes the received transmission data (S720). Then, the electronic device identifies the sensing data and the padding data from the decoded transmission data (S730). The sensing data refers to data from which padding data has been removed from the transmission data, and may be data for determining the state of the sensor (or the surrounding electronic environment of the transmitting electronic device or the transmitting electronic device). The padding data may be data for judging whether or not an attack occurs.

The electronic device determines the state of the external electronic device based on the sensing data, and determines whether the transmission data is attack based on the padding data (S740). The electronic device determines whether the identified padding data is the same as the predetermined padding data (or the expected data), and determines that the transmitted data is attacked if the identified padding data and the predetermined padding data are not the same. The transmitting-side electronic device and the receiving-side electronic device can share information about predetermined padding data. If the electronic device determines that the transmission data is attacked, the electronic device may remove information on the determined state of the external electronic device.

The method of controlling an electronic device according to the various embodiments described above may be provided as a computer program product. The computer program product may include a software program itself or a non-transitory computer readable medium in which the software program is stored.

A non-transitory readable medium is a medium that stores data for a short period of time, such as a register, cache, memory, etc., but semi-permanently stores data and is readable by the apparatus. In particular, the various applications or programs described above may be stored on non-volatile readable media such as CD, DVD, hard disk, Blu-ray disk, USB, memory card, ROM,

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the present invention.

1000: Electronic system
100a, 100b: electronic device 110: sensor
120, 150: processor 130, 140: communication interface

Claims (11)

A sensor for sensing the state of the electronic device to generate sensing data;
A processor for inserting and encoding predetermined padding data between the generated sensing data to generate transmission data; And
And a communication interface for transmitting the generated transmission data. The method according to claim 1,
Wherein the predetermined padding data comprises:
Wherein the sensing data has a predetermined size and is inserted between the sensing data at a predetermined time. A communication interface for receiving transmission data from an external electronic device; And
And a processor for decoding the received transmission data,
The processor comprising:
And determining whether or not the transmission data is an attack based on the padding data based on the sensing data. The electronic device according to claim 1, . The method of claim 3,
The processor comprising:
Determines whether the identified padding data is identical to predetermined padding data, and determines that the transmitted data is attacked if the identified padding data and the predetermined padding data are not the same. 5. The method of claim 4,
The processor comprising:
And removes information on the determined state of the external electronic device when it is determined that the transmission data has been attacked. Sensing data of the first electronic device to generate sensing data, inserting and encoding preset padding data between the generated sensing data to generate transmission data, and transmitting the generated transmission data to the second electronic device A first electronic device; And
And a second electronic device for receiving the transmission data from the first electronic device,
The second electronic device comprising:
The method comprising the steps of: decoding the received transmission data; identifying sensing data and padding data from the decoded transmission data; determining a state of the first electronic device based on the sensing data; To determine whether an attack is to be made. A method of controlling an electronic device,
Sensing the state of the electronic device to generate sensing data;
Inserting and encoding predetermined padding data between the generated sensing data to generate transmission data; And
And transmitting the generated transmission data. 8. The method of claim 7,
Wherein the predetermined padding data comprises:
Wherein the sensing data has a predetermined size and is inserted between the sensing data at a predetermined time. A method of controlling an electronic device,
Receiving transmission data from an external electronic device;
Decoding the received transmission data;
Identifying sensing data and padding data from the decoded transmission data; And
Determining a state of the external electronic device based on the sensing data, and determining whether to attack the transmission data based on the padding data. 10. The method of claim 9,
Wherein the determining step comprises:
Determining whether the identified padding data is the same as the predetermined padding data, and determining that the transmitted data is attacked if the identified padding data and the predetermined padding data are not the same. 11. The method of claim 10,
And removing information on the determined state of the external electronic device when it is determined that the transmission data has been attacked.

Images