US 12,445,295 B2
Systems and methods of securing vehicle services from denial-of-service attacks using dynamic signature
Hao Cai, Sammamish, WA (US); Haiyong Xie, San Jose, CA (US); Qingyuan Wang, ShangHai (CN); and Minzheng Zhao, ShangHai (CN)
Assigned to NIO TECHNOLOGY (ANHUI) CO., LTD., Hefei (CN)
Filed by NIO Technology (Anhui) Co., Ltd., Anhui (CN)
Filed on Sep. 19, 2023, as Appl. No. 18/369,993.
Prior Publication US 2025/0097047 A1, Mar. 20, 2025
Int. Cl. H04L 29/06 (2006.01); H04L 9/32 (2006.01); H04L 47/122 (2022.01); H04L 67/61 (2022.01)
CPC H04L 9/3242 (2013.01) [H04L 9/3297 (2013.01); H04L 47/122 (2013.01); H04L 67/61 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A system in a vehicle, the system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to:
receive a first plurality of sessions and a second plurality of sessions associated with a communication between a client and an in-vehicle application service, wherein the first plurality of sessions are authenticated sessions with a first quality of service (QOS) processing priority;
assign each of the received second plurality of sessions with a second QoS processing priority that is lower than the first QoS processing priority;
collect a flow signature of each of the first plurality of sessions and each of the second plurality of sessions associated with the communication between the client and the in-vehicle application service;
generate an expected runtime flow signature based on the collected flow signature of each of the first plurality of sessions associated with the communication between the client and the in-vehicle application service;
compare the flow signature of each of the second plurality of sessions with the expected runtime flow signature based on a time at which each of the second plurality of sessions were received;
promote the second QoS processing priority of a group of the second plurality of sessions to the first QoS processing priority; and
drop the second plurality of sessions with the second QoS processing priority.