Patent application EP18160802A (EP), filed 2018-03-08
Publication number: EP3373553A1
Title: SYSTEM AND METHOD FOR PROVIDING CYBER SECURITY TO AN IN-VEHICLE NETWORK
Abstract: A system and method securing an in-vehicle network in a vehicle may include a switch connected to at least two segments of the in-vehicle network and an IDPS connected to the switch. The IDPS unit may be adapted to: receive network messages from the switch; determine at least some of the network messages are related to a cyber threat and configure the switch according to the cyber threat. The IDPS unit may be included in the switch.
IPC codes: H04L  29/    06            A I
H04L  43/    04            A I
H04L  67/    12            A I
H04L  69/    22            A I
H04L   9/    40            A I
H04W  76/    12            A I
H04W  76/    15            A I
H04W  76/    16            A I
Claims: number: 1
text: A system for securing an in-vehicle network in a vehicle, the system comprising:
number: 2
text: The system of claim 1, wherein the IDPS unit is included in the switch.
number: 3
text: The system of claim 1 or 2,
wherein the IDPS unit is adapted to perform deep packet analysis of the network messages, and
wherein said determining at least some of the network messages are related to a cyber threat is based on a state and context of at least one of: the vehicle, the in-vehicle network and at least one component connected to the in-vehicle network.
number: 4
text: The system of any preceding claim, wherein the switch includes a ternary content-addressable memory (TCAM) table and wherein configuring the switch includes updating information in the TCAM table.
number: 5
text: The system of any preceding claim, wherein the IDPS unit is adapted to:
number: 6
text: The system of any preceding claim, wherein:
number: 7
text: The system of any preceding claim, further comprising at least one sensor adapted to identify events related to at least one of: the in-vehicle network, the vehicle and at least one unit connected to the in-vehicle network,
wherein the IDPS unit identifies a cyber threat based on a report received from the sensor.
number: 8
text: The system of any preceding claim, wherein the IDPS unit:
number: 9
text: A method of securing an in-vehicle network in a vehicle, the method comprising:
number: 10
text: The method of claim 9, wherein the IDPS unit is included in the switch.
number: 11
text: The method of claim 9 or 10, further comprising:
number: 12
text: The method of claim 9, 10 or 11, wherein the switch includes a ternary content-addressable memory (TCAM) table and wherein configuring the switch includes updating information in the TCAM table.
number: 13
text: The method of any of claims 9 to 12, further comprising:
number: 14
text: The method of any of claims 9 to 13, further comprising identifying the cyber threat based on relating network messages received from the switch to a model.
number: 15
text: A computer readable medium comprising instructions which, when executed by a processor in an IDPS, cause the IDPS to implement any of the methods of claims 9-14.
Office action: search_report, dated 2018-09-12
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US2015020152A1
ref_type: patent
severity: background
ref_id: US2016088001A1
ref_type: patent
severity: background
ref_id: US2006256730A1
ref_type: patent
severity: background
ref_id: - MUTER M ET AL: "A structured approach to anomaly detection for in-vehicle networks", INFORMATION ASSURANCE AND SECURITY (IAS), 2010 SIXTH INTERNATIONAL CONFERENCE ON, IEEE, PISCATAWAY, NJ, USA, 23 August 2010 (2010-08-23), pages 92 - 98, XP031777189, ISBN: 978-1-4244-7407-3
ref_type: npl
severity: background
ref_id: US2006256730
ref_type: patent
severity: background
ref_id: US2015020152
ref_type: patent
severity: novelty_destroying
ref_id: US2016088001
ref_type: patent
severity: background
ref_id: - MUTER M ET AL, "A structured approach to anomaly detection for in-vehicle networks", INFORMATION ASSURANCE AND SECURITY (IAS), 2010 SIXTH INTERNATIONAL CONFERENCE ON, IEEE, PISCATAWAY, NJ, USA, (20100823), ISBN 978-1-4244-7407-3, pages 92 - 98, XP031777189 [A] 1,7-9,15 * page  93, column  1, line  38  - column  2, line  27 * * page  94, column  1, lines  28-52  - column  2, lines  40-52 * * page  95, column  2, lines  20-41 * * page  97, column  2, line  37  - page  98, column  1, line  12 *
ref_type: npl
severity: background
Final disposition: pending (2018-09-12)