| CPC H04L 63/1425 (2013.01) [H04L 63/1416 (2013.01)] | 6 Claims |

|
1. A method of estimating a time of occurrence of a security event, the method comprising:
transmitting an actual time to a gateway of a vehicle;
obtaining, from the gateway, time history data storing an actual time flag data element;
obtaining, from the gateway, logging data prepared during security event detection; and
estimating a time of occurrence of a security event, based on the logging data and the time history data,
wherein the time history data and the logging data are prepared based on a vehicle reference time including a timestamp value and a reset counter value of the vehicle, and
wherein the gateway identifies a clock state of the vehicle during booting, and when the clock state of the vehicle is a disabled state, the gateway writes a data element of a reset flag on the time history data and then changes the clock state of the vehicle to an enabled state.
|