NMEA Gateway Rogue Device Detection on Ship Ethernet Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ship networks lack effective methods to identify rogue NMEA devices, which can lead to cyberattacks and non-compliance with cybersecurity requirements, as NMEA gateways cannot confirm if devices are authorized or unauthorized.
Innovation Solution
A system and method for active and passive detection of rogue NMEA devices using Ethernet-based packet broadcasting and protocol analysis to identify and trace unauthorized devices, comparing packets and source addresses against a CBS inventory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If NMEA gateway converts CAN-based NMEA messages into Ethernet protocols for data transmission, then communication versatility is improved, but device security and authorization verification deteriorate
Solution Approach 1:
The system implements feedback by having NMEA devices send response packets back to the manager server after receiving broadcast packets. The manager server verifies these responses against the CBS inventory to confirm device authorization. This closed-loop feedback mechanism enables security verification while maintaining communication versatility through protocol conversion.
Solution Approach 2:
The manager server acts as an intermediary between the NMEA gateway and the CBS inventory database. It receives packets from NMEA devices, verifies them against the inventory, and determines authorization status. This intermediary layer enables security verification without disrupting the protocol conversion functionality of the NMEA gateway.
2Adaptability or versatility
If NMEA gateway connects to multiple NMEA-based navigation and communication devices, then system functionality is improved, but identification of rogue devices deteriorates
Solution Approach 1:
The system performs preliminary action by maintaining a pre-configured CBS inventory database containing authorized device information before runtime. When packets are received, the manager server quickly verifies them against this pre-prepared inventory, enabling efficient rogue device detection without affecting the connectivity to multiple NMEA devices.
Solution Approach 2:
The system uses feedback by requiring each NMEA device to respond to broadcast packets with its identification information. The manager server collects these responses and compares them against the CBS inventory to identify rogue devices. This feedback mechanism enables detection among multiple connected devices without compromising system functionality.
3Productivity
If packet broadcasting is used to detect NMEA devices on shipboard Ethernet network, then device detection capability is improved, but network traffic complexity increases
Solution Approach 1:
The system implements periodic action by sending broadcast packets at intervals rather than continuously. This periodic broadcasting enables device detection while reducing network traffic complexity compared to continuous monitoring. The manager server processes these periodic broadcasts and collects responses from NMEA devices.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed herein are a method and system for active and passive detection of a rogue NMEA device, which can identify normal/abnormal NMEA devices on a ship network provided with an NMEA gateway, thereby preventing cyberattacks from unauthorized NMEA devices in a ship.