PROBLEM TO BE SOLVED: To provide a security device that is adaptable to various variable attacks and can detect attach frames.SOLUTION: A gateway 300b (security device) connected to plural electronic control units that receive and deliver frames (data frames) according to a CAN protocol via a bus includes a receiving unit 410 for receiving a frame from the bus, a holding unit 430 for holding data inspection parameters associated with an inspection of values of data in a data field of the frame, an updating unit 420 for updating the data inspection parameters held by the holding unit 430 when the reception interval of two frames having the same value in ID in determination of a transmission cycle for the frame received by the receiving unit 410 is out of a predetermined allowable range, and an inspection unit 440 for performing an inspection associated with determination as to whether or not the frame received by the receiving unit 410 is an attack frame, based on the data inspection parameter held by the holding unit 430.SELECTED DRAWING: Figure 13

    【課題】多様で変化し得る攻撃に適応して攻撃フレームを検知し得るセキュリティ装置を提供する。【解決手段】バスを介してCANプロトコルに従ってフレーム(データフレーム)を授受する複数の電子制御ユニットと接続されるゲートウェイ300b(セキュリティ装置)は、バスからフレームを受信する受信部410と、フレームのデータフィールド内のデータの値の検査に係るデータ検査パラメータを保持する保持部430と、受信部410に受信されたフレームに関する送信周期の判定においてIDが同値の2つのフレームの受信間隔が所定の許容範囲から外れる場合に、保持部430が保持するデータ検査パラメータを更新する更新部420と、保持部430が保持するデータ検査パラメータに基づいて、受信部410により受信されたフレームが攻撃フレームか否かの判定に係る検査を行う検査部440とを備える。【選択図】図13


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    SECURITY DEVICE, ATTACK DETECTION METHOD AND PROGRAM


    Weitere Titelangaben:

    セキュリティ装置、攻撃検知方法及びプログラム


    Beteiligte:
    MAEDA MANABU (Autor:in) / ANZAI JUN (Autor:in) / UJIIE YOSHIHIRO (Autor:in) / TANABE MASATO (Autor:in) / KISHIKAWA TAKESHI (Autor:in)

    Erscheinungsdatum :

    18.05.2017


    Medientyp :

    Patent


    Format :

    Elektronische Ressource


    Sprache :

    Japanisch


    Klassifikation :

    IPC:    H04L TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION , Übertragung digitaler Information, z.B. Telegrafieverkehr / B60R Fahrzeuge, Fahrzeugausstattung oder Fahrzeugteile, soweit nicht anderweitig vorgesehen , VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR / G06F ELECTRIC DIGITAL DATA PROCESSING , Elektrische digitale Datenverarbeitung



    SECURITY DEVICE, ATTACK DETECTION METHOD, AND PROGRAM

    MAEDA MANABU / ANZAI JUN / UJIIE YOSHIHIRO et al. | Europäisches Patentamt | 2017

    Freier Zugriff

    SECURITY DEVICE, ATTACK DETECTION METHOD, AND PROGRAM

    TANABE MASATO / KISHIKAWA TAKESHI / MAEDA MANABU et al. | Europäisches Patentamt | 2020

    Freier Zugriff

    SECURITY DEVICE, NETWORK SYSTEM AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | Europäisches Patentamt | 2020

    Freier Zugriff

    SECURITY DEVICE, NETWORK SYSTEM AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | Europäisches Patentamt | 2017

    Freier Zugriff

    SECURITY DEVICE, NETWORK SYSTEM, AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | Europäisches Patentamt | 2021

    Freier Zugriff