Vehilce network monitoring method and apparatus

Abstract

A vehicle network is provided with a monitoring-purpose onboard control apparatus (50) that detects illicit data through monitoring the data communication format predetermined in order to operate a communication protocol that is used in the vehicle network. Upon detecting illicit data whose communication format is different from the prescribed communication format, the monitoring-purpose onboard control apparatus (50) performs a process of transmitting alarm information to onboard control apparatuses (11, 12, 13, 21, 22, 23, 31, 32, 33), and also performs a process of prohibiting gateways (41, 42) from routing the illicit data.

Description

technical field [0001] The present invention relates to a vehicle network monitoring method and a vehicle network monitoring device which monitor data transmitted to a vehicle network installed in a vehicle such as an electric vehicle. Background technique [0002] Vehicles such as electric vehicles manufactured in recent years are equipped with many in-vehicle control devices including: an in-vehicle control device constituting a navigation system, an in-vehicle control device for electronically controlling various in-vehicle devices such as an engine, brakes, etc. Vehicle-mounted control devices, etc., that indicate various states of the vehicle, such as instruments. Then, in such a vehicle, various in-vehicle control devices are electrically connected by communication lines so that a vehicle network is formed, and the various in-vehicle control devices send or transmit various data to each other and receive various data to each other via the vehicle network. [0003] Fur...

AI Technical Summary

Problems solved by technology

[0006] Among intrusion detection techniques, those based on illegal event detection are not able to deal with attacks with unregistered illegal data, and anomaly detection-based intrusion detection techniques have not yet been supported by established methods for detecting anomalies by using CAN signals inside vehicles

Then, even in the system described in JP 2003-264595A, various components including the decoy network B40, the inducement part B3, the filter processing part B5, the intrusion detection part B4, etc. are required to suppress the input of illegal data into the internal network B30 , thus, in order to maintain security, complex structures are unavoidable

Namely, the feasibility of installing the system in a vehicle is minimal

Images