System and method for protecting electronic vehicle control systems against hacking
Techniques for protecting electronic vehicles control systems from unauthorized intrusion work with at least one electronic module of the vehicle and a protection device connected via electrical conductors to the interface communication line. The protection device includes a control unit for monitoring and control of vehicle parameters, a passive scanning of interface communication lines unit, a spectral analysis of interface communication lines unit, a unit for detection and suppression of malicious commands, and a unit for detecting and jamming in a given frequency range an unauthorized receiver/transmitter. The units for passive scanning of interface communication lines, spectral analysis, and detection and suppression of malicious commands are connected to the interface communication line. To detect unauthorized devices, the electrical parameters and the electrical signal of the interface communication line are measured, followed by construction of the signal spectrum in first and second time periods and their comparison.
1. A system for protecting from unauthorized intrusion electronic control systems of a vehicle, the system comprising:
an electrical conductor configured to connect to an interface communication line of the vehicle; and
a controller, implemented in hardware and software, connected to the communication line of the vehicle via the electrical conductor, and configured to manage and control vehicle parameters transported to the vehicle by performing operations comprising:
passively scanning the interface communication line while the interface communication line is in a “rest” state in which data is not exchanged thereon;
spectrally analyzing signals from the interface communication line while the interface communication line is in an “active” state in which data is exchanged thereon;
detecting and suppressing malicious commands; and
detecting and jamming signals from an authorized transceiver in a specified frequency range.
2. The system according to claim 1 , wherein the passive scanning comprises measuring an electrical parameter of the interface communication line.
3. The system according to claim 1 , wherein the spectral analysis includes measuring an electrical signal and construction of a signal spectrum therefrom.
4. The system of claim 1 , wherein the controller is further configured to generate a display including information about detected facts of unauthorized intrusion, and to receive entered configuration parameters.
5. The system according to claim 1 , wherein the passive scanning comprises:
measuring resistance and/or capacitance of the interface communication line;
comparing the measured resistance and/or capacitance to a reference value; and
determining that an unauthorized device has been connected to the interface communication line based on the comparison.
6. The system according to claim 5 , wherein the reference value is set when the system is installed in the vehicle.
7. The system according to claim 1 , wherein the spectral analysis comprises:
digitizing a collection of instantaneous values placed on the interface communication line;
calculating a spectrum from the digitized collection of instantaneous values;
comparing the calculated spectrum to a reference model; and
determining that an unauthorized device has been connected to the interface communication line based on the comparison.
8. The system according to claim 7 , wherein different physical units connected to the interface communication line result in different spectra being calculated.
9. The system according to claim 1 , wherein:
the passive scanning comprises:
measuring resistance and/or capacitance of the interface communication line; and
determining that an unauthorized device has been connected to the interface communication line based on a first comparison between the measured resistance and/or capacitance, and a reference value; and
the spectral analysis comprises:
digitizing a collection of instantaneous values placed on the interface communication line;
calculating a spectrum from the digitized collection of instantaneous values; and
determining that an unauthorized device has been connected to the interface communication line based on a second comparison between the calculated spectrum and a reference model.
10. A method for protecting from unauthorized intrusion electronic control systems of a vehicle that includes electrical components connected to an interface communication line, the method comprising:
passively scanning the interface communication line while the interface communication line is in a “rest” state in which data is not exchanged thereon;
spectrally analyzing signals from the interface communication line while the interface communication line is in an “active” state in which data is exchanged thereon;
suppressing malicious commands detected as a result of the passive scanning and/or the spectral analyzing; and
jamming signals from an authorized transceiver in a specified frequency range responsive to detection thereof.
11. The method according to claim 10 , further comprising displaying information about detected facts of unauthorized intrusion and receiving entered configuration parameters.
12. The method according to claim 10 , wherein the passive scanning comprises measuring an electrical parameter of the interface communication line.
13. The method according to claim 10 , wherein the spectral analysis includes measuring an electrical signal and construction of a signal spectrum therefrom.
14. The method according to claim 10 , wherein the passive scanning comprises:
measuring resistance and/or capacitance of the interface communication line;
comparing the measured resistance and/or capacitance to a reference value; and
determining that an unauthorized device has been connected to the interface communication line based on the comparison.
15. The method according to claim 14 , wherein the reference value is set when the system is installed in the vehicle.
16. The method according to claim 10 , wherein the spectral analysis comprises:
digitizing a collection of instantaneous values placed on the interface communication line;
calculating a spectrum from the digitized collection of instantaneous values;
comparing the calculated spectrum to a reference model; and
determining that an unauthorized device has been connected to the interface communication line based on the comparison.
17. The method according to claim 16 , wherein different physical units connected to the interface communication line result in different spectra being calculated.
18. The method according to claim 10 , wherein:
the passive scanning comprises:
measuring resistance and/or capacitance of the interface communication line; and
determining that an unauthorized device has been connected to the interface communication line based on a first comparison between the measured resistance and/or capacitance, and a reference value; and
the spectral analysis comprises:
digitizing a collection of instantaneous values placed on the interface communication line;
calculating a spectrum from the digitized collection of instantaneous values; and
determining that an unauthorized device has been connected to the interface communication line based on a second comparison between the calculated spectrum and a reference model.