Granted Patent B2

US 12,587,856 · App. 18/578,840 · Granted Mar 24, 2026

Inventors: Osman Aydin (Leinfelden-Echterdingen, DE); Viktor Pavlovic (Stuttgart, DE)

Assignee: MERCEDES-BENZ GROUP AG

H04W12/121

Abstract

Claims (46)

1 . A mobile device comprising:

an operating system;

at least two SIM profiles configured to provide several independent mobile connections, wherein network traffic is exchanged via at least one mobile connection with a mobile network and information transmitted with the network traffic is identified; and

an intrusion detection system or an intrusion detection and defense system configured to identify at least the information transmitted with the network traffic,

wherein the intrusion detection system or the intrusion detection and defense system is arranged in a direction of the information flow of network traffic received from at least one mobile connection upstream of the operating system of the mobile device,

wherein a deep packet inspection module is integrated into the intrusion detection system or the intrusion detection and defense system, and

wherein the deep packet inspection module is configured to analyze decrypted data packets of the network traffic received from the at least one mobile connection prior to the operating system of the mobile device by checking headers and contents of the decrypted data packets.

2 . The mobile device of claim 1 , further comprising:

a firewall arranged downstream of the intrusion detection system or the intrusion detection and defense system in the direction of the information flow.

3 . The mobile device of claim 1 , wherein the intrusion detection system or the intrusion detection and defense system is configured to monitor, control, and filter the network traffic.

4 . The mobile device of claim 1 , wherein the intrusion detection system or the intrusion detection and defense system is integrated into a modem of the mobile device.

5 . The mobile device of claim 1 , wherein the mobile device is a mobile terminal or telecommunications module of a vehicle.

6 . The mobile device of claim 1 , wherein the intrusion detection system or the intrusion detection and defense system is further configured to:

detect a security threat for the mobile device; and

responsive to the detection of the security threat

reconfigure the operating system to adapt system behavior of the mobile device to the security threat, or

restrict a functionality of at least one hardware or software component downstream of the mobile device in the direction of the information flow.

7 . A method for operating a mobile device comprising an operating system and at least two SIM profiles configured to provide several independent mobile connections, the method comprising:

identifying, by an intrusion detection system or an intrusion detection and defense system of the mobile device, at least information transmitted with network traffic exchanged via at least one network connection with a mobile network, wherein one of the at least two SIM profiles is used for the at least one network connection, and wherein the intrusion detection system or the intrusion detection and defense system is arranged in a direction of the information flow of network traffic received from at least one mobile connection upstream of the operating system of the mobile device;

detecting, by the intrusion detection system or the intrusion detection and defense system, a security threat for the mobile device; and

responsive to the detection of the security threat

reconfiguring the operating system to adapt system behavior of the mobile device to the security threat, or

restricting a functionality of at least one hardware or software component downstream of the mobile device in the direction of the information flow.

8 . The method of claim 7 , wherein the system behavior is adapted in such a way that the mobile device

logs events or information,

at least one functionality provided by the mobile device is restricted or deactivated, or

a selected path for transferring the network traffic is changed.

9 . The method of claim 7 , wherein after detecting a security threat for the mobile device, a functionality of at least one mobile connection is restricted.

10 . The method of claim 9 , wherein network traffic exchanged via a first mobile connection is adjusted when the mobile device receives a trigger via a second mobile connection.

11 . A vehicle, comprising:

a mobile device, which comprises

an operating system;

at least two SIM profiles configured to provide several independent mobile connections, wherein network traffic is exchanged via at least one mobile connection with a mobile network and information transmitted with the network traffic is identified; and

an intrusion detection system or an intrusion detection and defense system configured to identify at least the information transmitted with the network traffic, wherein the intrusion detection system or the intrusion detection and defense system is arranged in a direction of the information flow of network traffic received from at least one mobile connection upstream of the operating system of the mobile device,

wherein a deep packet inspection module is integrated into the intrusion detection system or the intrusion detection and defense system, and

wherein the deep packet inspection module is configured to analyze decrypted data packets of the network traffic received from the at least one mobile connection prior to the operating system of the mobile device by checking headers and contents of the decrypted data packets.

12 . The vehicle of claim 11 , wherein the intrusion detection system or the intrusion detection and defense system is further configured to:

detect a security threat for the mobile device; and

responsive to the detection of the security threat

reconfigure the operating system to adapt system behavior of the mobile device to the security threat, or

restrict a functionality of at least one hardware or software component downstream of the mobile device in the direction of the information flow.

13 . The vehicle of claim 11 , wherein the mobile device further comprises:

a firewall arranged downstream of the intrusion detection system or the intrusion detection and defense system in the direction of the information flow.

14 . The vehicle of claim 11 , wherein the intrusion detection system or the intrusion detection and defense system is configured to monitor, control, and filter the network traffic.

15 . The vehicle of claim 11 , wherein the intrusion detection system or the intrusion detection and defense system is integrated into a modem of the mobile device.

16 . The vehicle of claim 11 , wherein the mobile device is a telecommunications module of the vehicle.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (22)