Preventing replay-type attacks on a vehicle communications system
View Patent ↗A method and system for preventing replay-type attacks on a vehicle communications system that sends short message service (SMS) messages between a call center and a fleet of vehicles. The method uses separate sequence counters maintained at the call center and at each of the vehicles in the fleet to help prevent or at least minimize the effects of unauthorized third party interference; such as replay-type attacks. Each wireless message is embedded with a sequence counter that is provided by the sender and is compared by the recipient with a separate sequence counter for purposes of validation. Some optional features that can be used in conjunction with the sequence counters include a tolerance window feature, a consecutive message feature, and a proximity feature, to name but a few.
1. A method of preventing replay-type attacks on a vehicle communications system, comprising the steps of:
(a) maintaining a central data structure at a call center, wherein the central data structure includes a plurality of sequence counters associated with a plurality of vehicles, wherein the plurality of sequence counters includes a first sequence counter that is associated with a specific vehicle and is incremented each time a new message is sent to or received from the specific vehicle;
(b) maintaining a vehicle data structure at the specific vehicle, wherein the vehicle data structure includes a second sequence counter that is also associated with the specific vehicle and is incremented independently of the first sequence counter each time a new message is sent to or received from the call center;
(c) sending a wireless message between the call center and the specific vehicle, wherein the wireless message includes the first sequence counter if the wireless message is sent from the call center or the second sequence counter if the wireless message is sent from the specific vehicle; and
(d) comparing the first sequence counter to the second sequence counter, wherein the comparison is used to prevent replay-type attacks by identifying wireless messages that were previously sent between the call center and the specific vehicle;
wherein step (d) further comprises comparing the first sequence counter to a sequence counter in a next message received to determine if the two sequence counters are in consecutive order; and
wherein, if the two sequence counters are in consecutive order but are less than the second sequence counter, then the method further comprises the step of:
determining if the two consecutive sequence counters are within a certain proximity of the second sequence counter.
2. The method of claim 1 , wherein the certain proximity is a predetermined fraction of the overall range of the second sequence counter.