US 12,348,565 B2
Attack detection system
Kazuya Okada, Tokyo (JP)
Assigned to TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed by TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed on Nov. 1, 2023, as Appl. No. 18/499,757.
Claims priority of application No. 2022-178333 (JP), filed on Nov. 7, 2022.
Prior Publication US 2024/0155002 A1, May 9, 2024
Int. Cl. H04L 9/40 (2022.01); H04L 67/12 (2022.01)
CPC H04L 63/1491 (2013.01) [H04L 67/12 (2013.01)] 4 Claims
OG exemplary drawing
 
1. An attack detection system comprising a first device and a second device, wherein
the first device having a first controller configured to execute:
monitoring communication to a first vehicle connected to a network, and
when it is detected that an attack on the first vehicle is being carried out from an attack source device, transmitting a first command for activating a honeypot server simulating a vehicle system of the first vehicle to the second device and transmitting a second command for transferring packets related to the attack, the packets being transmitted from the attacking device to the first vehicle, to the second device to a communication device that relays communication to the first vehicle in the network, and
the second device having the second controller configured to execute:
processing, by the honeypot server, the packets related to the attack, the packets being transmitted from the attack source device to the first vehicle and transferred to the second device by the communication device, wherein:
the first command further includes position information of the first vehicle, traveling direction of the first vehicle or speed of the first vehicle as first information about a running of the first vehicle, and
the second device, as a process related to the attack, causes the honeypot server to simulate the running of the first vehicle based on the first information and transmits packets related to a simulation of the running of the first vehicle as a response to the attack.