Patent ID: 11952013
Assignee: GM GLOBAL TECHNOLOGY OPERATIONS LLC
Field: Digital communication (Electrical engineering)
Classification: CPC B  G  H | IPC B  G  H

Claim 0:
1. A method for determining a trusted context of operation by an in-vehicle Network Intrusion Detection System (NIDS) for learning of a vehicle platform, comprising:
executing, by a processor, the NIDS using an algorithm to monitor a set of Electronic Control Units (ECUs) and vehicle state elements by receiving a set of vehicle inputs about a vehicle's operating state;
in response to a determination about the vehicle's operating state, identifying, by the processor, a trusted window during which learning about network topology and whitelisted messages contained in a vehicle platform build configuration is allowable, wherein the identifying is based on a vehicle mileage and a security access status associated with manufacturing;
creating, by the processor, a vehicle build-specific configuration containing a list of topologies of networks and whitelisted messages in use by the set of ECUs in each vehicle platform build configuration; and
preventing, by the processor, an undocumented misconfiguring of at least one network in a list of networks of topologies and whitelisted messages of the vehicle-specific build configuration in the vehicle platform outside the trusted window based on results from an assessment of at least one security implication of a network of a topology and whitelist message contained in a list in use by the set of ECUs in the vehicle platform.