Patent ID: 9703955
Date: 2017-07-11
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method for detecting security attacks against a vehicle via the vehicle's OBD-II (On-Board Diagnostics II) port, the method comprising: at an OBD-II CAN (Controller Area Network) message screening system, wherein the OBD-II CAN message screening system is electrically coupled to the vehicle via the OBD-II port: establishing an OBD-II CAN inbound message whitelist and an OBD-II CAN outbound message blacklist; in response to receiving an inbound CAN message from a device external to the vehicle, updating statistics of the inbound CAN message and comparing the inbound CAN message with the OBD-II CAN message whitelist; forwarding the inbound CAN message to the vehicle via the vehicle's OBD-II port when the inbound CAN message appears in the OBD-II CAN message whitelist; in response to receiving an outbound CAN message from the vehicle, updating statistics of the outbound CAN message and comparing the outbound CAN message with the OBD-II CAN message blacklist; and forwarding the CAN message to an external device via the vehicle's OBD-II port when the CAN message does not appear in the OBD-II CAN message blacklist.