A process detects anomalies on a controller area network (CAN) bus. An arbitration field in a message on the CAN bus is analyzed, and a data field in the message on the CAN bus is inspected. The process further monitors a frequency of message identifiers that are transmitted across the CAN bus, and determines that an overall bus load crosses a threshold. The process then transmits an alert when the analyzing the arbitration field, the inspecting the data field, the monitoring the frequency, and the determining the overall bus load indicate that an anomaly has occurred on the CAN bus.

Discussed herein are devices, systems, and methods for detecting anomalous or malicious processes based on in-vehicle network traffic data. A method includes receiving, at a monitor device, a controller access network (CAN) bus packet from an electronic control unit (ECU), implementing an ensemble hierarchical agglomerative clustering (E-HAC) algorithm to identify respective clusters to which the CAN bus data maps, and determining, based on the identified respective clusters, whether the CAN bus packet is associated with in-vehicle network intrusion.

A sensor bridge, for use in an Ethernet network in a vehicle, includes a sensor interface, a mapper and a communication processor. The sensor interface is configured to receive sensor data from a sensor installed in the vehicle. The mapper is configured to form mapped sensor data by applying to the sensor data a direct mapping that maps specified parts of the sensor data to corresponding bit positions in one or more Ethernet packets. The communication processor is configured to generate the one or more Ethernet packets including the mapped sensor data, and to transmit the one or more Ethernet packets over the Ethernet network.

A relay device relays a management frame between nodes connected to mutually different communication buses. The relay device includes (i) communicator units provided respectively to correspond to the communication buses, and (ii) communication controller units provided respectively to correspond to the communicator units. The communication controller unit respectively includes a corresponding transmission buffer configured to store the management frame, which is to be transmitted from the communicator unit corresponding to the communication controller unit. In response to determining that the management frame is retained in the transmission buffer corresponding to the communication controller unit, the communication controller unit transmits the management frame, which is received at a present time and stored in the transmission buffer, from the communicator unit corresponding to the communication controller unit.

A multi-protocol network and methods for operating the same are provided. The method begins with establishing a wireless-connection between a first transceiver in a first device and a second-transceiver in a second device using a wireless-protocol. First, wired-protocol packets and non-packet data are received and converted in the first device to second-packets compatible with the wireless-protocol by inserting synchronization-bits non-packet data in a preamble field of the packets. This is initiated by sensing arrival of the preamble without waiting for a start of data, thus lowering the latency of the propagation of the second-packets. The second-packets are transmitted from the first transceiver to the second, and converted to third-packets compatible with the wired-protocol by removing the synchronization-bits. Latency is improved by initiating/starting a packet to the wired controller before a data portion of the packet is received. The number of synchronization bits is selected so the second-packets are aligned and synchronized with wireless-protocol packets.

A CANopen-based data transmission gateway changeover method includes: making an active gateway go alive, and mutually monitoring heartbeat packet status together with a standby gateway over an active-standby gateway communications network; keeping the active gateway alive and recording a breakdown of the standby gateway if no heartbeat packet of the standby gateway is detected within a preset heartbeat period and a heartbeat packet of the active gateway is successfully transmitted on the active-standby gateway communications network; requesting the standby gateway to go alive if the heartbeat packet of the active gateway fails to be transmitted on the active-standby gateway communications network; stopping requesting the standby gateway in a first in-vehicle communications network to go alive, and requesting the standby gateway to go alive; and keeping the active gateway alive and recording a breakdown of the standby gateway if still no response is received from the standby gateway.

A method of communicating between nodes in a network where a node receives a sequence of symbols that will form a packet on a first communications channel and has a planned packet that it would send on a second communications channel. A destination is encoded into an arbitration portion of a header sequence of the packet, the header sequence comprising a sequence of symbols. The transmission on the second communications channel is as per the planned packet, for as long as the symbols of the planned packet match the symbols being received on the first channel. An arbitration decision is made when the symbols do not match, with the node either continuing to send the rest of the planned packet, or the rest of the packet being received on the first communications channel.

A network hub is provided for an onboard network system. The onboard network system includes first and second networks for transmission of first-type and second-type frames following first and second communication protocols. The network hub includes a receiver that receives a first-type frame. A processor determines whether or not the first-type frame received by the receiver includes first information that is a base for a second-type frame to be transmitted to the second network, to obtain a determination result, and selects a port to send a frame based on the first-type frame based on the determination result. A transmitter sends the frame based on the first-type frame to a wired transmission path connected to the port selected by the processor based on the first-type frame received by the receiver.

In some examples, a transport agnostic source includes a streaming device to stream video on diverse transport topologies including isochronous and non-isochronous transports. In some examples, a transport agnostic sink includes a receiving device to receive streamed video from diverse transport topologies including isochronous and non-isochronous transports.

The present disclosure relates to a data frame structure of a Controller Area Network (CAN) communication message for construction machinery, which is capable of generating a large number of setting items, and a method of transmitting a CAN communication message for construction machinery, and the data frame structure includes: an identifier including a parameter group number PGN having a destination address; and a data field including a suspect parameter number SPN related to the parameter group number PGN and parameter data related to the suspect parameter number SPN.