Patent ID: 11956262
Assignee: PANASONIC INTELLECTUAL PROPERTY CORPORATION OF AMERICA
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. An anomaly detection method in an in-vehicle network system performing service-oriented communication via Ethernet (registered trade mark), the anomaly detection method comprising:
monitoring a communication establishment frame flowing over the Ethernet in a communication establishment phase of the service-oriented communication, the communication establishment frame including a communication ID,
dynamically generating, for the communication ID, a detection rule including the communication ID written in the communication establishment frame, and a server address or a client address written in the communication establishment frame;
monitoring a communication frame flowing over the Ethernet in a communication phase of the service-oriented communication;
determining that the communication frame includes the communication ID corresponding to the dynamically generated detection rule;
by referring to the dynamically generated detection rule corresponding to the communication ID written in the communication frame, detecting the communication frame as an anomalous frame when a server address or a client address written in the communication frame differs from the server address or the client address specified in the dynamically generated detection rule;
providing a notification of an anomaly in response to detecting the anomalous frame; and
generating, for each of one or more communication IDs, a plurality of detection rules that include an identical communication ID and server addresses different from each other or client addresses different from each other.