Abstract:
A fraud sensing method for use in an in-vehicle network system including a plurality of electronic control units that communicate with each other via a bus includes a detecting step of detecting that a state of a vehicle satisfies a predetermined condition, and a switching step of switching, upon detecting that the state of the vehicle satisfies the predetermined condition, an operation mode of a fraud-sensing electronic control unit connected to the bus between a first mode in which a first type of sensing process for sensing a fraudulent message in the bus is performed and a second mode in which the first type of sensing process is not performed.
Abstract:
An authentication method for at least one of a plurality of devices connected to a HAN includes checking, with a first device among the plurality of devices, validity of a second device using a CRL including attribute information regarding the second device among the plurality of devices, and revoking, with the first device, the second device if the checking is negative.
Abstract:
A gateway (90) connected to a bus (10), a bus (20), and the like used by a plurality of electronic control units for communication includes a frame communication unit (901) that receives a frame, a transfer control unit (906) that removes verification information used to verify a frame from the content of the frame received by the frame communication unit (901) and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.
Abstract:
Provided is a fraud detection rule updating method enabling the updating of rules that serve as the basis for detecting malicious frames as necessary in an on-board network system. In an on-board network system equipped with multiple electronic control units (ECUs) (100a to 100e) that communicate via buses and fraud detecting ECUs (400a to 400c) that determine, based on fraud detection rules, whether messages transmitted on the buses conform to the rules, a fraud detection rule updating method is used in which delivery data including updated fraud detection rules is received from a server (500) external to the on-board network system, and if a certain update condition is satisfied, the fraud detection rules in a fraud detecting ECU (400a) are updated to the updated fraud detection rules.
Abstract:
A method for dealing with unauthorized frames that makes it possible to take appropriate measures when an unauthorized data frame is detected in a vehicle network system is provided. A plurality of electronic control units (ECUs) in the vehicle network system are connected to a bus used for communicating frames. In the method for dealing with unauthorized frames, if a misuse detection ECU (100) that checks a frame appearing in the bus detects an unauthorized frame that does not comply with a certain rule (N in step S1003) and a certain prevention condition is satisfied (Y in step S1006), a prevention process for preventing the plurality of ECUs from performing a process corresponding to the unauthorized frame is performed (an error frame is transmitted) (step S1007) or, if the certain prevention condition is not satisfied, the prevention process is not performed.
Abstract:
Provided is a key management method to secure security in an onboard network system having multiple electronic control units storing a shared key. In the key management method of the onboard network system including multiple electronic units (ECUs) that perform communication by frames via a bus, a master ECU (400) stores a shared key to be mutually shared with one or more ECUs (100a through 100d). Each of the ECUs (100a through 100d) acquire a session key by communication with the master ECU (400) based on the stored shared key, and after this acquisition, executes encryption processing regarding a frame transmitted or received via the bus, using this session key. In a case where a vehicle in which the onboard network system is installed is in a particular state, the master ECU (400) executes inspection (e.g., steps S1201, S1203) of a security state of the shared key stored by the ECU (100a) or the like.
Abstract:
An anomaly detection electronic control unit, that performs anomaly detection processing and that is connected to a bus which a plurality of electronic control units use for communication to communicate following a CAN (Controller Area Network) protocol, includes an anomaly detection processing requesting unit that decides an anomaly detection processing timing based on an ID of a data frame acquired from the bus, and an anomaly detection processing unit that performs anomaly detection processing regarding the data frame at the anomaly detection processing timing decided by the anomaly detection processing requesting unit.