Vicone Corporation

Quanta Computer Incorporated

Institute for Information Industry

Zhi-Wei Chen

Yi-Ting Chen

Yi-Li Cheng

Chih-Kang Lu

Chih-Hung Lin

Chin-Wei Tien

Chia-Wei Tien

Hsien-Ming Tsai

Hsien-Li Lin

A connected vehicle has several electronic control units (ECUs). Entities running in different ECUs are constrained in corresponding security boundaries. Messages across security boundaries are transmitted over a connection that is not directly available to entities constrained in security boundaries. Messages across security boundaries between entities are inspected. A message from an entity in one security boundary to another entity in another security boundary is inspected by normalizing a content of the message, and comparing the normalized content to a baseline. A corrective action is performed against the message in response to determining that a difference between the normalized content and the baseline indicates a change that is prohibited by a security policy.

Detection of abnormal operations in connected vehicles

An intrusion detection and prevention system (IDPS) has detection probes and detection hubs that are deployed onboard a connected vehicle and a detection correlation backend that is deployed on the cloud. A detection probe receives raw packets of network traffic of a communication network of the connected vehicle. The detection probe filters the raw packets in accordance with packet filter rule entries to generate packets of interest. The detection probe scans the packets of interest for data indicative of network threats and outputs corresponding unfiltered detection logs. The detection probe filters the unfiltered detection logs in accordance with detection filter rule entries to generate detection logs of interest. A detection hub aggregates detection logs of interest from one or more detection probes to generate aggregated detection logs. A detection correlation backend evaluates the aggregated detection logs to detect network threats.

Adaptive network threat detection in distributed automotive execution environments of connected vehicles

A virtual machine monitoring method used in a virtual machine monitoring system is provided. The virtual machine monitoring method includes retrieving a hypercall transmitted from one of a plurality of virtual machines to a hypervisor of a virtual machine monitoring system, wherein the hypercall is used for establishing a channel between a source virtual machine and a target virtual machine. A central control virtual machine ID information in the hypervisor is retrieved. A type of the channel established by the hypercall is determined according to the central control virtual machine ID information and channel-establishing information corresponding to the hypercall. When the channel is a private channel that is not related to a central control virtual machine of the virtual machines, a security module is used to monitor the private channel.

Virtual machine monitoring method, system and computer readable storage medium

This invention provides a method and an apparatus for determining a rendering duration. An audio/video recording system is used for recording an audio bit stream and a video bit stream. The audio bit stream includes a plurality of audio frames. The video bit stream includes N video frames. According to this invention, the rendering durations of the first and the last video frames are determined based on the moments when the system starts to record the audio frames and the video frames. According to this invention, when the (i+1)th video frame through the (i+N)th video frame are lost, the rendering duration of the ith video frame is determined based on N. According to this invention, when the system receives a command of synchronization correction for the ith video frame, the rendering duration of the ith video frame is determined based on a correction value.

Apparatus and method for determining rendering duration of video frame

Growing community of inventors

Taipei, Taiwan

Zhi-Wei Chen