PRIORITY

This application claims priority to Taiwan Patent Application No. 108136062 filed on Oct. 4, 2019, which is hereby incorporated by reference in its entirety.

FIELD

The present invention relates to a security monitoring apparatus and method for a vehicle network. In particular, the present invention relates to a security monitoring apparatus and method for a controller area network installed on a vehicle.

BACKGROUND

With the rapid development of the science and technology, all kinds of vehicles are loaded with various electronic control units (ECUs) to control and detect various electronic apparatuses installed on the vehicles and associated components. Generally speaking, a vehicle network is also called a controller area network (CAN), and the controller area network is a vehicle bus standard currently widely used for vehicles and allows the electronic control units on the vehicles to communicate with each other through a controller area network bus.

However, since the internal communication of the controller area network is based on the broadcasting mechanism of an information-oriented transmission protocol, no information security protection measure is provided for the transmission of internal messages. In addition, under the mechanism of the controller area network, there is no monitoring mechanism for the known nodes or newly added nodes, and because there is no host computer to monitor the node composition (e.g., various electronic control units) and messages under the controller area network, it gives intentional persons an opportunity to take advantage. When a certain node under the controller area network is invaded (e.g. replaced or counterfeited), the intruder can send illegal messages through the invaded node to affect the operation of the vehicle, which may endanger the driving safety of the vehicle.

In addition, under the mechanism of the controller area network, an external apparatus can receive and transmit messages over the controller area network as long as the external apparatus is connected to the controller area network of the vehicle through the controller area network bus. However, because the operation mechanism of the controller area network does not control the nodes in the controller area network and does not provide any information security protection measure for the transmission of internal messages, illegal messages that may exist in the controller area network cannot be detected.

Accordingly, an urgent need exists in the art to provide a security protection mechanism for the controller area network under the existing controller area network architecture, monitor the nodes under the controller area network, and prevent intentional persons from invading the vehicle network and thus affecting the operation of the vehicle.

SUMMARY

Provided is a security monitoring apparatus for a vehicle network, and the security monitoring apparatus is installed on a vehicle. The security monitoring apparatus may comprise a controller area network interface, a storage and a processor, wherein the processor is electrically connected to the controller area network interface and the storage. The controller area network interface is connected to a controller area network of the vehicle through a controller area network bus. The storage stores a list and an encryption key, wherein the list stores a unit code and a serial number of each of a plurality of electronic control units connected to the controller area network. The processor performs the following operations: (a) transmitting an indicator and the encryption key to the electronic control units through the controller area network interface, wherein the indicator is related to a first controller area network identification code and the unit code, and the encryption key is encrypted by an encryption algorithm; (b) receiving a response code of each of the electronic control units from the electronic control units through the controller area network interface, wherein each of the response codes is generated by the serial number of each of the electronic control units and the encryption key through a hash algorithm; (c) comparing the response code returned by each of the electronic control units based on the list, the encryption key and the hash algorithm to determine whether each of the electronic control units correctly returns the response code; and (d) generating an alert signal when one of the electronic control units does not correctly return the response code.

Also provided is a security monitoring method for a vehicle network, and the security monitoring method is adapted for use in an electronic apparatus. The electronic apparatus is installed on a vehicle, and the electronic apparatus comprises a controller area network interface, a storage and a processor. The controller area network interface is connected to a controller area network of the vehicle through a controller area network bus. The storage stores a list and an encryption key, wherein the list stores a unit code and a serial number of each of a plurality of electronic control units connected to the controller area network. The security monitoring method for a vehicle network is executed by the processor and comprises the following steps: (a) transmitting an indicator and the encryption key to the electronic control units through the controller area network interface, wherein the indicator is related to a first controller area network identification code and the unit code, and the encryption key is encrypted by an encryption algorithm; (b) receiving a response code of each of the electronic control units from the electronic control units through the controller area network interface, wherein each of the response codes is generated by the serial number of each of the electronic control units and the encryption key through a hash algorithm; (c) comparing the response code returned by each of the electronic control units based on the list, the encryption key and the hash algorithm to determine whether each of the electronic control units correctly returns the response code; and (d) generating an alert signal when one of the electronic control units does not correctly return the response code.

In the security monitoring technology (at least including the apparatus and the method) provided herein, an authentication mechanism is performed on known nodes in a controller area network, the security monitoring apparatus transmits an encryption key, the node generates a response code according to its own serial number and the encryption key through a hash algorithm, and the security monitoring apparatus verifies whether the response code of each of the nodes is correct. When one of the nodes does not correctly return the response code, the security monitoring apparatus generates an alert signal. In addition, the security monitoring apparatus may further receive from each node a controller area network identification code that may be used by the node and the corresponding transmission frequency, so abnormal transmission data can be found in advance and a warning message can be issued when abnormal controller area network identification code and transmission frequency occur in the controller area network. In addition, since the authentication mechanism is built on the application level, the architectures of the traditional controller area network and the packet transmission do not need to be changed, and thus the disclosed technology herein is more applicable to the existing controller area network architecture products. Therefore, the disclosed technology herein can effectively monitor the safety of the vehicle network to prevent intentional persons from invading the vehicle network and thus affecting the operation of the vehicle, thereby ensuring the driving safety of the vehicle.

The detailed technology and preferred embodiments implemented for the subject invention are described in the following paragraphs accompanying the appended drawings for people skilled in this field to well appreciate the features of the claimed invention.

