Granted Patent B2

US 12,316,705 · App. 17/821,163 · Granted May 27, 2025

Inventors: Paulius Duplys (Markgroeningen, DE); Tobias Gehrmann (Stuttgart, DE)

Assignee: ROBERT BOSCH GMBH

H04L67/12G07C5/0816

Abstract

Claims (41)

1. A computer-implemented method for recognizing and/or preventing an intrusion into a service-oriented communication system of a vehicle, comprising the following steps:

registering a process originating from an instance in the service-oriented communication system;

checking, at least based on a predetermined negative list, whether the process in the service-oriented communication system is impermissible, wherein the predetermined negative list includes a hierarchy of criteria, and the process in the service-oriented communication system is assessed as impermissible during the check when at least one criterion of the hierarchy of criteria is met with respect to the process; and

in response to the check indicating the process is impermissible:

updating the predetermined negative list, the updating including using a radio interface to download an updated version of the predetermined negative list from a server outside of the vehicle via a wireless mobile communications network;

rechecking, based on the updated predetermined negative list, whether the process in the service-oriented communication system is impermissible;

determining, by the rechecking, that the process is not impermissible; and

in response to the rechecking determining that the process is not impermissible, allowing the process.

2. The method as recited in claim 1 , further comprising in response to the check indicating the process is impermissible;

suppressing the process.

3. The method as recited in claim 1 , further comprising in response to the check indicating the process is impermissible:

verifying the updated version of the predetermined negative list; and

again checking, based on the updated version of the predetermined negative list, whether the process in the service-oriented communication system is impermissible.

4. The method as recited in claim 1 , further comprising in response to the check indicating the process is impermissible:

transferring at least the process to a server outside of the service-oriented communication system;

checking outside of the service-oriented communication system whether the process in the service-oriented communication system is impermissible;

receiving the result of the check from the server; and

verifying the result.

5. The method as recited in claim 1 , wherein the predetermined negative list includes at least one check algorithm, and the process in the service-oriented communication system is assessed as impermissible during the check when the at least one check algorithm is applied at least to the process and, during execution and/or at an end of the at least one check algorithm, at least one further criterion is met.

6. The method as recited in claim 1 , wherein the service-oriented communication system includes a scalable service-oriented middleware over Internet Protocol (IP) (SOME/IP).

7. The method as recited in claim 1 , further comprising in response to the check indicating the process is impermissible:

transferring the process to a server outside of the service-oriented communication system.

8. A service-oriented communication system in a vehicle, configured to recognize and/or prevent an intrusion into the service-oriented communication system, the communication system configured to:

register a process originating from an instance in the service-oriented communication system;

check, at least based on a predetermined negative list, whether the process in the service-oriented communication system is impermissible, wherein the predetermined negative list includes a hierarchy of criteria, and the process in the service-oriented communication system is assessed as impermissible during the check when at least one criterion of the hierarchy of criteria is met with respect to the process; and

in response to the check indicating the process is impermissible:

update the predetermined negative list, the updating including using a radio interface to download an updated version of the predetermined negative list from a server outside of the vehicle via a wireless mobile communications network;

recheck, based on the updated predetermined negative list, whether the process in the service-oriented communication system is impermissible;

determine, by the rechecking, that the process is not impermissible; and

in response to the rechecking determining that the process is not impermissible, allow the process.

9. The communication system as recited in claim 8 , comprising:

a routing manager;

an intrusion detection and prevention system;

a memory including the predetermined negative list;

wherein the routing manager is configured to:

have every process checked by the intrusion detection and prevention system with respect to an intrusion into the service-oriented communication system and based on the predetermined negative list, before the respective process is further processed by the routing manager; and

initiate the at least one measure at least as a function of a result of the check; and

further process each process when a result of the check has assessed it as not impermissible.

10. The communication system as recited in claim 8 , further comprising:

an interface for communication of the communication system with a server outside of the service-oriented communication system; and

a root-of-trust module, which is configured to verify data received from the server.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (28)