System and method for controlling access to an in-vehicle communication network

1. A system comprising:

an in-vehicle communication network included in a vehicle and electrically connected to a physical interface port for connecting an external device to the in-vehicle communication network, wherein the external device is adapted to physically connect to the physical interface port and to exchange data with the in-vehicle communication network, via the physical interface port; and

a security unit including a memory and a controller physically installed between the physical interface and the in-vehicle communication network and adapted, based on a security code received from the external device, to:

select at least one of: a set of components connected to the in-vehicle communication network, and a set of segments of the in-vehicle communication network; and

prevent the external device from communicating with at least one of: the selected set of components and the selected set of segments,

wherein the security code is generated based on an interaction with a user; and

wherein the security unit is adapted to validate the security code based on a unique attribute of the vehicle.

2. The system of claim 1 , comprising a server, wherein the server is adapted to:

receive information recorded by the security unit; and

perform at least one of:

generate a history log of maintenance service of the vehicle,

identify unauthorized access to the in-vehicle network,

identify malicious activity on the in-vehicle network, and

generate insights based on the recorded data.

3. The system of claim 1 , wherein the security unit is adapted to:

share a secret with a generator of the security code; and

validate the security code based on the shared secret.

4. The system of claim 1 , wherein the security unit is adapted to use the same security code a predefined number of times.

5. The system of claim 1 , wherein the security unit is adapted to prevent communication over the interface port based on at least one of: a predefined time interval and an event.

6. The system of claim 1 , wherein the security code is provided to the security unit by one of: a hardware component directly connected to the interface port and an external network.

7. The system of claim 1 wherein the security code is a vehicle-specific code generated or provided by one of: a user associated with the vehicle and a server.

8. The system of claim 1 wherein the security code includes at least two of:

a unique identification of the security code, an identification of the vehicle, a duration value, a reuse value, an identification of an event, an identification of nodes connected to the in-vehicle network, an indication of an operation, a context, and vehicle-specific identification.

9. The system of claim 1 , wherein the security unit is adapted to prevent communication over the interface port based on a context of the vehicle.

10. The system of claim 1 wherein the security code is a vehicle-specific code generated based on an attribute of the vehicle, and wherein the vehicle-specific code is validated, by the security unit, based on the attribute of the vehicle.

11. The system of claim 1 , wherein the security unit is adapted to record information related to a communication with the external device.

12. A method comprising:

receiving, by a security unit including a memory and a controller, from an external device, a code including digital information, wherein the security unit is physically installed between the physical interface and an in-vehicle communication network included in a vehicle, and wherein the external device is adapted to exchange data with the in-vehicle communication network, via a physical interface port;

selecting, by the security unit and based the digital information, at least one of: a set of components connected to the in-vehicle communication network, and a set of segments of the in-vehicle communication network; and

preventing the external device from communicating with at least one of: the selected set of components and the selected set of segments,

wherein the security code is generated based on an interaction with a user; and

wherein validating the security code, by the security unit, based on a unique attribute of the vehicle.

13. The method of claim 12 , comprising recording information related to a communication with the external device.

14. The method of claim 12 , comprising:

receiving, by a server, information recorded by the security unit; and

performing, by the server, at least one of:

generating a history log of maintenance service of the vehicle,

identifying unauthorized access to the in-vehicle network,

identifying malicious activity on the in-vehicle network, and

generating insights based on the recorded data.

15. The method of claim 12 , comprising reusing the same security code according to one of:

a predefined number of time, a predefined time interval and an event.

16. The method of claim 12 , comprising preventing communication over the interface port based on a context of the vehicle.

17. The method of claim 12 , comprising validating the security code based on cryptographic material associated with the security code.

18. The method of claim 12 , wherein the security code includes at least two of:

a unique identification of the security code, an identification of the vehicle, a duration value, a reuse value, an identification of an event, an identification of nodes connected to the in-vehicle network, an indication of an operation, a context, and vehicle-specific identification.