PROBLEM TO BE SOLVED: To provide a security device that is adaptable to various variable attacks and can detect attach frames.SOLUTION: A gateway 300b (security device) connected to plural electronic control units that receive and deliver frames (data frames) according to a CAN protocol via a bus includes a receiving unit 410 for receiving a frame from the bus, a holding unit 430 for holding data inspection parameters associated with an inspection of values of data in a data field of the frame, an updating unit 420 for updating the data inspection parameters held by the holding unit 430 when the reception interval of two frames having the same value in ID in determination of a transmission cycle for the frame received by the receiving unit 410 is out of a predetermined allowable range, and an inspection unit 440 for performing an inspection associated with determination as to whether or not the frame received by the receiving unit 410 is an attack frame, based on the data inspection parameter held by the holding unit 430.SELECTED DRAWING: Figure 13

    【課題】多様で変化し得る攻撃に適応して攻撃フレームを検知し得るセキュリティ装置を提供する。【解決手段】バスを介してCANプロトコルに従ってフレーム(データフレーム)を授受する複数の電子制御ユニットと接続されるゲートウェイ300b(セキュリティ装置)は、バスからフレームを受信する受信部410と、フレームのデータフィールド内のデータの値の検査に係るデータ検査パラメータを保持する保持部430と、受信部410に受信されたフレームに関する送信周期の判定においてIDが同値の2つのフレームの受信間隔が所定の許容範囲から外れる場合に、保持部430が保持するデータ検査パラメータを更新する更新部420と、保持部430が保持するデータ検査パラメータに基づいて、受信部410により受信されたフレームが攻撃フレームか否かの判定に係る検査を行う検査部440とを備える。【選択図】図13


    Access

    Download


    Export, share and cite



    Title :

    SECURITY DEVICE, ATTACK DETECTION METHOD AND PROGRAM


    Additional title:

    セキュリティ装置、攻撃検知方法及びプログラム


    Contributors:

    Publication date :

    2017-05-18


    Type of media :

    Patent


    Type of material :

    Electronic Resource


    Language :

    Japanese


    Classification :

    IPC:    H04L TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION , Übertragung digitaler Information, z.B. Telegrafieverkehr / B60R Fahrzeuge, Fahrzeugausstattung oder Fahrzeugteile, soweit nicht anderweitig vorgesehen , VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR / G06F ELECTRIC DIGITAL DATA PROCESSING , Elektrische digitale Datenverarbeitung



    SECURITY DEVICE, ATTACK DETECTION METHOD, AND PROGRAM

    MAEDA MANABU / ANZAI JUN / UJIIE YOSHIHIRO et al. | European Patent Office | 2017

    Free access

    SECURITY DEVICE, ATTACK DETECTION METHOD, AND PROGRAM

    TANABE MASATO / KISHIKAWA TAKESHI / MAEDA MANABU et al. | European Patent Office | 2020

    Free access

    SECURITY DEVICE, NETWORK SYSTEM AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | European Patent Office | 2020

    Free access

    SECURITY DEVICE, NETWORK SYSTEM AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | European Patent Office | 2017

    Free access

    SECURITY DEVICE, NETWORK SYSTEM, AND ATTACK DETECTION METHOD

    TSURUMI JUNICHI / UJIIE YOSHIHIRO / NAKANO TOSHIHISA et al. | European Patent Office | 2021

    Free access