Abstract:
A method for dealing with unauthorized frames that makes it possible to take appropriate measures when an unauthorized data frame is detected in a vehicle network system is provided. A plurality of electronic control units (ECUs) in the vehicle network system are connected to a bus used for communicating frames. In the method for dealing with unauthorized frames, if a misuse detection ECU (100) that checks a frame appearing in the bus detects an unauthorized frame that does not comply with a certain rule (N in step S1003) and a certain prevention condition is satisfied (Y in step S1006), a prevention process for preventing the plurality of ECUs from performing a process corresponding to the unauthorized frame is performed (an error frame is transmitted) (step S1007) or, if the certain prevention condition is not satisfied, the prevention process is not performed.
Abstract:
An anomaly detection electronic control unit, that performs anomaly detection processing and that is connected to a bus which a plurality of electronic control units use for communication to communicate following a CAN (Controller Area Network) protocol, includes an anomaly detection processing requesting unit that decides an anomaly detection processing timing based on an ID of a data frame acquired from the bus, and an anomaly detection processing unit that performs anomaly detection processing regarding the data frame at the anomaly detection processing timing decided by the anomaly detection processing requesting unit.
Abstract:
Provided is a gateway device connected to a bus used in communication by multiple electronic control units (ECUs) in a vehicle network system, which minimizes adverse effects on the vehicle network and which may use a determination technique taking some amount of time to determine whether or not a received frame is appropriate. A gateway 300a that forwards frames between a bus 200a and a bus 200b includes a receiving unit that receives a first frame, and a transmitting unit that, when a first frame transmitted by an ECU 100a, for example, is received from the bus 200a by the receiving unit, includes, in a second frame including information based on content of the first frame, first control information related to a restriction on processing after reception of the second frame, and transmits the second frame to the bus 200b.
Abstract:
An anomaly handling method that suitably handles a case where the possibility of a vehicle being unauthorizedly controlled so as to suppress the effects thereof is provided. In an anomaly handling method used in one or a plurality of electronic control units installed in one vehicle, when an unauthorized frame is detected on an onboard network installed in another vehicle, an inter-vehicle communication message transmitted from a device installed in the other vehicle is received as an anomaly detection notification, and an anomaly handling processing is selected from a plurality of predetermined anomaly handling processing in accordance with the received content (e.g., step S304 in level determination) to transition to a safe state for example, and the selected anomaly handling processing is executed (e.g., steps S305 through S311).
Abstract:
A fraud detection method for use in an in-vehicle network system including a plurality of electronic control units that communicate with one another via a bus in accordance with the CAN protocol includes receiving a data frame sent to the bus and verifying, if a data frame that does not follow a predetermined rule regarding a transmission period is received in receiving a data frame, a specific identifier in the data frame.
Abstract:
An update processing method for updating data used to generate a MAC in an in-vehicle network system including a plurality of electronic control units that communicate a data frame having a MAC added thereto with one another via a bus in accordance with the CAN protocol is provided. The method includes the detection step of detecting a state of a vehicle having the in-vehicle network system mounted therein and the update step of updating a MAC key used to generate a MAC under the condition that the state of the vehicle detected in the detection step is a predetermined state.
Abstract:
In a fraud-detection method for use in an in-vehicle network system including a plurality of electronic control units (ECUs) that exchange messages on a bus and a fraud-detection ECU connected to the bus, the fraud-detection ECU includes a memory that stores rule information indicating a rule regarding transmission of a message to be transmitted on the bus, the fraud-detection ECU determines whether or not a message transmitted on the bus is malicious by using the rule information, and, in a case where the message is malicious, transmits an error message including a message identifier of the malicious message. The fraud-detection ECU acquires updated rule information transmitted from an external server, and updates the rule information by using the updated rule information.