US 12,457,241 B2
Physics-aware detector for protocol spoofing attacks in time synchronized networking
Vuk Lesi, Cornelius, OR (US); Christopher Gutierrez, Hillsboro, OR (US); Shabbir Ahmed, Beaverton, OR (US); Marcio Juliato, Portland, OR (US); and Manoj Sastry, Portland, OR (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Dec. 28, 2022, as Appl. No. 18/090,410.
Prior Publication US 2024/0223603 A1, Jul. 4, 2024
Int. Cl. G06F 1/12 (2006.01); H04J 3/06 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/1466 (2013.01) [G06F 1/12 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
receiving a message with time information from a first device operating as a clock leader by a second device operating as a clock follower in a time-synchronized network (TSN), the time information to include information to synchronize a first clock for the first device and a second clock for the second device to a network time for the TSN maintained by the first clock;
retrieving an actual time offset value for the message from a model;
retrieving an estimated time offset value for the message, the estimated time offset value comprising a value between an estimated sending time and an estimated receiving time of the message generated by a time offset estimator of the second device;
generating difference information between the actual time offset value and the estimated time offset value for the message; and
determining whether the time information for the message has been modified to cause the first clock and the second clock to desynchronize when the difference information is greater than or equal to a defined threshold value.