Hyundai Motor Company

Kia Motors Corporation

Kia Corporation

Hyundai Autoever Corporation

Yura Corporation Co., Ltd.

Kia Cornoration

Osong Medical Innovation Foundation, Korea University Research and Business Foundation

A Ram Cho

Seung Wook Park

Ho Jin Jung

Hyun Soo Ahn

In Yong Jung

Jae Jun Ha

Se Il Kim

Wha Pyeong Lim

Dong Hoon Lee

Young Jun Lee

Dae Young Kim

Won Seok Choi

Jae Woo Im

Se Young Lee

Kyung Ho Joo

Seong Yong Kang

Young Hoon Kwon

Tae Guen Kim

Soo Mi Kim

An embodiment intrusion detection system for detecting intrusions in an in-vehicle network includes a message queue module configured to store network messages collected from the in-vehicle network in a message queue, a memory configured to securely store a ruleset comprising a set of detection rules used in a plurality of detection techniques, a rule engine configured to apply the plurality of detection techniques to the collected network messages to detect security events and configured to determine a severity score and a reliability score for each detected security event, and an interface manager configured to transmit detection reports to a remote backend server in response to detection of the security events.

System and method for detecting intrusion into in-vehicle network

According to an aspect, a method is performed by a first controller for providing security for second controllers in an in-vehicle network. An inherent information request is transmitted to a suspicious controller of the plurality of second controllers for an inherent information of the suspicious controller. The inherent information request includes a certificate assigned to the first controller. An encrypted inherent information of the suspicious controller is received from the suspicious controller and a decrypted inherent information is compared with a pre-stored inherent information. The suspicious controller is determined to be an anomalous controller when the decrypted inherent information is different from the pre-stored inherent information. In response to receiving an update request from a backend server for a specified controller out of the plurality of second controllers, the inherent information request including the certificate assigned is transmitted to the specified controller.

Method and system for providing security on in-vehicle network

The present invention relates to a method and a device for wirelessly updating software for a vehicle and, more specifically, to a method and a device for wirelessly updating software of an electronic device for a vehicle. A method for wirelessly updating software of a gateway for a vehicle, according to one exemplary embodiment of the present invention, comprises the steps of: receiving a first message including a software module list from at least one controller; and transmitting, to an update server, a second message including a software module list with respect to each of the at least one controller, wherein the first message comprises hardware version information, and the second message comprises region information of the vehicle.

Method and device for wirelessly updating software for vehicle

According to an aspect, a method performed by a first controller for providing security for multiple second controllers in an in-vehicle network, includes transmitting an inherent information request to a suspicious controller of the second controllers for inherent information of the suspicious controller, the inherent information request including a certificate assigned to the first controller, and receiving an encrypted inherent information of the suspicious controller from the suspicious controller, the encrypted inherent information having been encrypted with a public key associated with the certificate, and using a private key associated with the certificate for obtaining decrypted inherent information from the encrypted inherent information, and comparing the decrypted inherent information with pre-stored inherent information, and determining the suspicious controller to be an anomalous controller when the decrypted inherent information is different from the pre-stored inherent information.

A method of processing a vehicle-to-everything (V2X) message in a V2X message transmitting entity may comprise obtaining, at the V2X message transmitting entity, status information of a transmission target entity; determining adaptively a security level for a V2X message to be transmitted to the transmission target entity based on the obtained status information; and generating the V2X message according to the determined security level, and transmitting the V2X message to the transmission target entity. Because security levels of V2X messages are adaptively determined, the V2X messages can be processed according to a processing capability of the transmission target entity and the type of the V2X message, thereby assuring the safety of the driver.

Method for adaptively adjusting security level of V2X communication message and apparatus therefor

A reprogramming method of a vehicle includes authenticating a diagnostor; receiving integrated firmware comprising a plurality of firmwares that correspond to a plurality of target controllers, respectively, from the diagnostor that is completely authenticated; authenticating the integrated firmware; encrypting and storing the plurality of firmwares included in the integrated firmware; and generating encryption keys that corresponds the plurality of target controllers, respectively apparatus. The encrypting and storing comprises encrypting and storing the plurality of firmwares to the encryption keys that correspond to the plurality of firmwares, respectively.

In-vehicle apparatus for efficient reprogramming and controlling method thereof

A method of performing diagnostic communication with a vehicle using a diagnostic device includes: acquiring a certificate revocation list (CRL) corresponding to a certificate of the diagnostic device from an external device, verifying a validity of the certificate using the acquired CRL, performing authentication with the vehicle when the validity of the certificate is verified, and starting diagnostic communication between the diagnostic device and the vehicle when the authentication is performed.

Vehicle diagnostic device and method of managing certificate thereof

The present disclosure relates to a method of managing a controller with reliability and, more particularly, to authentication and data exchange during installation/use/removal of a vehicle controller, a gateway and a tester using an encryption algorithm. A method of authenticating a controller by a gateway in a vehicle includes: transmitting a first message including a first random number to the controller when a first condition is satisfied; receiving, from the controller, a second message including the first random number to which an electronic signature has been attached through a private key of the controller; decrypting the first random number having the electronic signature attached thereto using a public key of the controller; and transmitting, to the controller, a symmetric key encrypted using the public key of the controller when the decryption has been successfully performed.

Method of providing security for controller using encryption and apparatus therefor

A method of authenticating a controller by a gateway in a vehicle may include transmitting a first symmetric key to the controller; generating a first one-time authentication value (OTAV), encrypting the first OTAV with the first symmetric key and delivering the encrypted first OTAV to the controller; sending a request for authentication using the first OTAV to the controller; and receiving a hash value from the controller in response to the request.

Method of providing security for controller using encryption and apparatus thereof

A method for controlling access security at a vehicle gateway of a vehicle including at least one control unit in communication with the vehicle gateway includes: receiving a certificate from a diagnosis device; recognizing a rating of the certificate; and performing at least one of an integrity checking process and a security key authorization process according to the rating of the certificate to determine whether the diagnosis device is allowed to access to the vehicle.

Growing community of inventors

Suwon-si, South Korea

A Ram Cho