公开(公告)号：US11418519B2

公开(公告)日：2022-08-16

申请号：US16934838

申请日：2020-07-21

申请人： Red Bend LTD.

发明人： Guy Ruvio ,  Saar Yaacov Dickman ,  Yuval Weisglass ,  Anuja Sonalker

IPC分类号： H04L9/40 ,  G06F21/55 ,  G06F21/64 ,  H04W12/10 ,  H04W12/106 ,  H04W12/128 ,  B60R25/00 ,  H04L67/12 ,  H04W12/00 ,  H04W4/44 ,  H04W4/70

摘要： There is provided a method for identifying malicious activity that changes the integrity of data sent out from a vehicle, comprising: intercepting, by an output data monitoring agent that monitors data sent out from the vehicle to an external receiving computing unit using a communication interface in communication with a network; intercepting, by at least one sensor data monitoring agent that monitors sensor data outputted by at least one sensor associated with the vehicle; monitoring the integrity of the data sent out by the vehicle by analyzing the data collected by the output data monitoring agent with the sensor data collected by the at least one sensor data monitoring agent to identify a mismatch; and identifying an indication of malicious activity that changed the data sent out from the vehicle relative to the data sensed by the at least one sensor.

公开(公告)号：US11748474B2

公开(公告)日：2023-09-05

申请号：US17073167

申请日：2020-10-16

申请人： Red Bend Ltd.

发明人： Guy Ruvio ,  Yuval Weisglass ,  Saar Yaacov Dickman

IPC分类号： G06F21/85 ,  G06F21/55 ,  H04L9/40 ,  H04W12/122 ,  H04W12/126 ,  H04W12/128 ,  H04W4/48 ,  H04L67/12 ,  H04L12/40

CPC分类号： G06F21/554 ,  G06F21/85 ,  H04L63/0227 ,  H04L63/1416 ,  H04L63/1425 ,  H04W12/122 ,  H04W12/126 ,  H04W12/128 ,  H04L67/12 ,  H04L2012/40215 ,  H04W4/48

摘要： The present invention provides a security system, and methods useful for vehicle CAN bus communication mapping and attack originator identification, comprising: a CAN Bus Monitor, (CBM), configured to monitor the CAN bus communication comprising one or more frames, to and/or from at least one Electronic Control Unit, (ECU); a characterization module in communication with the CBM, configured to generate at least one characteristic for the monitored communication from each the ECU and at least one characteristic for each communication frame; (c) a comparator unit in communication with the characterization module, configured to compare one or more the characteristics of at least one frame against characteristics of each the ECU communication in order to detect at least one anomaly; and, (d) one or more Identification module in communication with the comparator, configured to identify at least one ECU originating an attack on the CAN bus.

公开(公告)号：US10992495B2

公开(公告)日：2021-04-27

申请号：US16697723

申请日：2019-11-27

申请人： Red Bend Ltd.

发明人： Guy Ruvio ,  Saar Yaacov Dickman ,  Yuval Weisglass ,  Zachi Avatichi

IPC分类号： G06F13/00 ,  H04L12/40 ,  G05B19/042

摘要： Methods, systems, and devices manipulate operation of at least one electronic control unit (ECU) connected to a controller area network (CAN) bus. The at least one ECU includes at least one error counter, by counting errors associated with at least one ECU. The manipulating is based on generating and broadcasting via the CAN at least one bit stream destined to at least one ECU, thereby manipulating at least one ECU status, determined by the ECU error counter and querying for its status state.