Method and system for realizing network intrusion detection on automobile gateway

A network intrusion detection and intrusion detection technology, applied in the field of automotive gateways, can solve problems that affect MCU/MPU processing and do not have security protection

Pending Publication Date: 2021-07-16
XIAMEN YAXON NETWORKS CO LTD
View PDF5 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The introduction of Ethernet has brought more network security threats, but the original set of MCU/MPU for traditional gateways does not have the ability of security protec...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and system for realizing network intrusion detection on automobile gateway
  • Method and system for realizing network intrusion detection on automobile gateway
  • Method and system for realizing network intrusion detection on automobile gateway

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0031] In order to make the object, technical solution and advantages of the present invention clearer, the embodiments of the present invention will be further described in detail below in conjunction with the accompanying drawings.

[0032] see figure 1 and figure 2 As shown, on the one hand, a method for realizing network intrusion detection on an automobile gateway, comprising:

[0033] S101, the IDS service unit of the automobile gateway MCU / MPU initializes the preset register of the automobile gateway Ethernet chip, and writes all intrusion detection rules into the storage unit of the Ethernet chip;

[0034] S102. During the operation of the automobile gateway, the Ethernet chip detects whether an intrusion detection rule is matched, and if so, modifies the hit status identifier;

[0035] S103. The IDS service unit acquires the hit status identifier to perform intrusion detection judgment.

[0036] In this embodiment, the switch Ethernet chip is used as an example fo...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method and system for realizing network intrusion detection on an automobile gateway, and the method comprises the steps: an IDS service unit of an MCU/MPU of the automobile gateway initializes a preset register of an Ethernet chip of the automobile gateway, and writes all intrusion detection rules into a storage unit of the Ethernet chip; in the running process of the automobile gateway, the Ethernet chip detects whether an intrusion detection rule is matched or not, and if yes, the hit state identification modification is carried out; and the IDS service unit obtains the hit state identifier to perform intrusion detection judgment. According to the invention, the Ethernet chip is used for intrusion detection, rapid matching is carried out based on intrusion detection rules, and the IDS service unit on the MCU/MPU only needs to carry out state backward reading and feedback configuration, so that intrusion detection can be realized, large consumption on the performance of the MCU/MPU is not caused, and the processing of the existing service of the MCU/MPU is not influenced.

Description

technical field [0001] The invention relates to the technical field of automobile gateways, in particular to a method and system for realizing network intrusion detection on an automobile gateway. Background technique [0002] At present, automotive gateways are gradually transitioning from traditional CAN / CAN FD, LIN, and FlexRay data communications to Ethernet. Now many solutions are based on Ethernet chip + MCU / MPU to expand Ethernet. The introduction of Ethernet has brought more network security threats, but the original set of MCU / MPU for traditional gateways does not have the ability of security protection. If the IDS (Intrusion Detection System) The performance requirements are relatively high, and high performance consumption may affect the processing of existing services of the MCU / MPU. Contents of the invention [0003] The main purpose of the present invention is to propose a method and system for implementing network intrusion detection on an automobile gatew...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/66
CPCH04L63/1416H04L63/1425H04L63/1458H04L12/66
Inventor 赵国开戴智超黄朝阳陈茹涛黄运峰
Owner XIAMEN YAXON NETWORKS CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products