Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Abnormal communication detection device and method thereof, and computer-readable recording medium

A technology for abnormal communication and detection devices, which is applied to computer components, computer security devices, computing, etc., to achieve the effect of reducing over-detection

Active Publication Date: 2022-02-01
NIPPON TELEGRAPH & TELEPHONE CORP
View PDF8 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

It is known that by means of network connection to an illegal ECU or illegal action rewriting of a known ECU, an attack transmission that inserts an ID associated with an attack target function may induce illegal actions of the target function

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Abnormal communication detection device and method thereof, and computer-readable recording medium
  • Abnormal communication detection device and method thereof, and computer-readable recording medium
  • Abnormal communication detection device and method thereof, and computer-readable recording medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0046] Below, refer to figure 1 , figure 2 Next, the configuration of the abnormal communication detecting device of the first embodiment for detecting abnormal communication from the communication of each electronic control device in the communication network will be described. like figure 1 As shown, the abnormal communication detection device 1 of this embodiment includes: a stage switching unit 11, a receiving unit 12, a temporary holding unit 13, a knowledge information acquisition unit 14, a knowledge information storage unit 14a, a distribution rule generation unit 15, a distribution rule storage unit 15 a , distribution unit 16 , first detectors 17 - 1 , .

[0047] like figure 2 As shown, the nth detector 17 - n (n=1, . Furthermore, the n-th probe 17 - n may have components other than those shown in the figure, or may not have a part of the components shown in the figure. For example, the receiving unit 171 of the nth probe 17 - n may directly transmit the commu...

Embodiment 2

[0071] Depending on the state of the machine, eg parking, driving, autonomous driving, etc. in the vehicle, the communication to which sensor is assigned changes. For example, in communication data from a vehicle, there are IDs that appear in a cycle+event type when the ignition of the vehicle is ON, but appear in an event type when the ignition is OFF.

[0072] Below, refer to Figure 4 , Figure 5 Next, the structure of the abnormality communication detection apparatus of Example 2 which processes the communication data sent from the electronic control apparatus which has several mechanical states is demonstrated. like Figure 4 As shown, the abnormal communication detection device 2 of this embodiment includes: a stage switching unit 11, a receiving unit 12, a temporary holding unit 13, a knowledge information acquisition unit 24, a knowledge information storage unit 14a, a distribution rule generation unit 25, a distribution rule storage unit 15a, distribution unit 16, ...

Embodiment 3

[0081] Depending on the structure of the machine or the combination of installed probes, most of the communication data may belong to one group and may be allocated only to specific probes. The abnormal communication detection device can process multiple tasks in parallel, but when the detector can be configured as an independent device, by preparing multiple identical learners and detectors, the processing time required for learning and detection can be reduced and distributed , Processing load.

[0082] Below, refer to Figure 7 , the configuration of the abnormal communication detecting device of the third embodiment in which a plurality of the same detectors are prepared will be described. like Figure 7 As shown, the abnormal communication detection device 3 of this embodiment includes: a stage switching unit 11, a receiving unit 12, a temporary holding unit 13, a knowledge information acquisition unit 14, a knowledge information storage unit 14a, a distribution rule ge...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

An abnormal communication detection device capable of reducing overdetection is provided. Including: a receiving unit for receiving communication data for learning including an identifier and communication data for detecting including an identifier; a knowledge information acquiring unit for acquiring at least any one of the time characteristic of the communication data for learning and the characteristic of the payload The information related to the characteristics of the detector is knowledge information; the distribution rule generation unit generates distribution rules according to the knowledge information, that is, generates rules for specifying which detector among the plurality of detectors assigns which identifier to the communication data; the distribution unit, According to the allocation rule, the communication data is allocated to any one of the probes; and when the communication data for learning is allocated to the multiple probes, learning is used to detect the communication data allocated to the probe. The abnormal distinction model detects the distinction between normal and abnormal detection communication data based on the learned model when the detection communication data is assigned.

Description

technical field [0001] The present invention relates to the detection of abnormalities caused by attack communication, etc., in a network installed in vehicles, machine tools, construction machinery, agricultural machinery, etc., a communication device connected to the network, and a communication system constituted by them A communication abnormality detecting device, an abnormal communication detecting method, and a computer-readable recording medium. Background technique [0002] Vehicles (cars, special vehicles, motorcycles, bicycles, etc.), machine tools, construction machinery, agricultural machinery and other machinery are equipped with multiple electronic control units (ECU: Electronic Control Unit). A typical network used in the communication network is a controller area network (CAN: Controller Area Network). The CAN network structure adopts a so-called bus type structure that shares the communication lines of each ECU. In the communication process on the bus of ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/28B60R16/023
CPCB60R16/023H04L63/1408H04L63/1433H04L2012/40215G06F21/577H04L2012/40273G06N20/20B60R16/0232G06F18/217
Inventor 小山卓麻冈野靖田中政志
Owner NIPPON TELEGRAPH & TELEPHONE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com