Symantec Corporation

Nio Usa, Inc.

Qiyan Wang

Anand Kashyap

Yongjie Cai

Shankar Somasundaram

Yongbum Kim

Jamie P Carlson

Samir Agrawal

Luna Chen

Abraham T Chen

Jerry L Petree

Sandeep Dhull

Veysel Özer

Remote devices have replaced keys as a means to access a secure feature of a vehicle. Remote door locks, starters, climate control, trunk openers, etc., have allowed vehicles to be more welcoming and easier to use. However, such functions often rely on radio frequency transmissions that can merely relay signals coming from an authorized device that may allow a nefarious user to access the vehicle or contents therein. By encoding sequence numbers and timestamps within an exchange, a vehicle may determine that an authorized user is too far away to be granted access to the secure feature, thereby denying access to the nefarious user implementing a relay attack on the vehicle.

Radio frequency tag relay attack prevention and notification

Embodiments of the present disclosure are directed to methods and systems for providing secure over-the-air firmware updates to one or more vehicles. More specifically, the present disclosure describes applying to firmware images distributed to one or more vehicles encryption that is unique to each update version. The encryption is also unique to each vehicle receiving the update. Embodiments of the present disclosure can also include determining and verifying the integrity of an available OTA firmware update prior to authorizing installation of the firmware update in a vehicle.

Method and system for providing secure over-the-air vehicle updates

The disclosed computer-implemented method for locating unrecognized computing devices may include (1) identifying a plurality of cooperating computing devices on a wireless network that are each configured with a device location application, (2) determining a physical location for each cooperating computing device within the plurality of cooperating computing devices, (3) receiving, from the device location application on the plurality of cooperating computing devices, data about packets intercepted by the plurality of cooperating computing devices that are directed to the wireless network by an unrecognized computing device, and (4) locating the unrecognized computing device based on information received from the plurality of cooperating computing devices that identifies both the physical location for each cooperating computing device and signal strengths of the packets intercepted by the plurality of cooperating computing devices. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for locating unrecognized computing devices

A wireless router configured to detect an intruder. In one embodiment, a method may include monitoring received signal strength in a wireless router and creating a profile of the received signal strength as monitored during a learn mode. The method may also include comparing activity of the received signal strength in the wireless router, during an intruder detection mode, to the profile and issuing a notification, based on the comparing.

Wireless router configured to detect an intruder

A method and system for intruder detection is provided. The method includes generating a whitelist of media access control (MAC) addresses of a plurality of wireless devices that are acceptable in a detection zone of a wireless router and detecting, by the wireless router, a further wireless device. The method includes issuing a notification in response to absence, on the whitelist, of a media access control address of the further wireless device, the notification indicating a physical intruder within the detection zone, wherein at least one action of the method is performed by a processor in or coupled to the wireless router.

Context aware intruder detection using WIFI MAC addresses

A method for a secure boot of a vehicular system is provided. The method includes performing a security self-verification on a first electronic control unit (ECU) of a vehicular system and sending a security challenge to a second electronic control unit of the vehicular system. The method includes verifying a security response from the second electronic control unit, the security response relating to the security challenge and indicating an aspect of contents of memory of the second electronic control unit. The performing the security self-verification and verifying the security response establishes a chain of trust that includes the first electronic control unit and the second electronic control unit.

Secure boot for vehicular systems

A method and system for detecting an intruder is provided. The method includes monitoring received signal strength in a wireless router and creating a profile of the received signal strength as monitored during a learn mode. The method includes comparing activity of the received signal strength in the wireless router, during an intruder detection mode, to the profile and issuing a notification, based on the comparing, wherein at least one step of the method is performed by a processor.

Using the home wireless router to detect an intruder not carrying any wireless device

A method for authenticating messages is provided. The method includes calculating a hash value based on a key and a message count value and receiving a data message associated with the message count value. The method includes receiving an authentication message that includes the message count value and a message authentication code derived from the data message, the message count value and the key. The method includes applying portions of the data message to look up portions of the hash value and combining the portions of the hash value to form a verification version of the message authentication code. The method includes determining whether the message authentication code matches the verification version of the message authentication code.

Fast CAN message authentication for vehicular systems

A method for intruder detection is provided. The method includes determining received signal strength of a first wireless device, while the first wireless device is moved at random within a region and generating a profile of the received signal strength of the first wireless device. The method includes determining received signal strength of a second wireless device and issuing an alert, responsive to received signal strength of the second wireless device meeting the profile. An intruder detection system is also provided.

Automatically learning signal strengths at places of interest for wireless signal strength based physical intruder detection

A method for intruder detection is provided. The method includes monitoring, at a wireless sniffer in a building, received signal strength relative to each of a plurality of wireless access points, wherein a first wireless access point of the plurality of wireless access points is located within the building and a second wireless access point of the plurality of wireless access points is located external to the building. The method includes creating a profile of the received signal strength from each of the plurality of wireless access points, during a learn mode and comparing activity of the received signal strength from each of the plurality of wireless access points to the profile, during an intruder detection mode. The method includes issuing a notification, based on the comparing. An intruder detection system is also provided.

Leveraging neighbors' wireless access points in wireless-signal-variation-based physical intruder detection systems

A computer-implemented method for authenticating messages in a control area network is described. In one embodiment, a message identifier for a data message is ascertained. Each device is associated with one or more message identifiers. The data message is sent from a first device to a second device. The data message is associated with the ascertained message identifier. An authentication code computed by the first device is sent to the second device. The authentication code is sent by the first device in the data message or in an authentication message.

Growing community of inventors

Mountain View, CA, United States of America

Qiyan Wang