Title:
COMMUNICATION CONTROL APPARATUS AND COMMUNICATION CONTROL METHOD
Document Type and Number:
WIPO Patent Application WO/2017/145526
Kind Code:
A1
Abstract:
The purpose of the present invention is to easily add a security function to an existing control apparatus, and especially to detect or avoid DoS attacks without affecting the real-time property of communication between control apparatuses.
A communication control apparatus relays a communication frame to be transmitted to a control apparatus from a network, the communication frame being constituted by small frames that follow a predetermined order. The communication control apparatus is provided with: an IFG measurement unit that measures an IFG of the communication frame; a communication frame scan unit that scans data in the communication frame without storing the data and that acquires the scanned data and data relating to the arrangement of the communication frame; an allowable-IFG determination unit that determines an allowable IFG of the communication frame that is to be received next, on the basis of the scanned data of the current communication frame acquired by the communication frame scan unit; an allowable-IFG list that stores the allowable IFG obtained by the allowable-IFG determination unit; an abnormal communication frame determination unit that determines that the communication frame is a DoS attack from an IFG measurement value acquired by the IFG measurement unit, data relating to the arrangement of the small frames of the communication frame acquired by the communication frame scan unit, and the content of the allowable-IFG list stored in the allowable-IFG list; and a network control unit which, in accordance with a determination result from the abnormal communication frame determination unit, adds to the communication frame security information signifying discarding of or a warning about the communication frame and transmits the communication frame to the control apparatus. The communication control apparatus is characterized in that the abnormal communication frame determination unit determines that the communication frame is a DoS attack by comparing the allowable IFG stored in the allowable-IFG list with the IFG measurement value.
Inventors:
FUJITA JUNYA (JP)
YAMADA TSUTOMU (JP)
YAMADA HIROMICHI (JP)
YAMADA TSUTOMU (JP)
YAMADA HIROMICHI (JP)
Application Number:
PCT/JP2017/000363
Publication Date:
August 31, 2017
Filing Date:
January 10, 2017
Export Citation:
Assignee:
HITACHI LTD (JP)
International Classes:
H04L12/40; H04L12/28
Foreign References:
| JP2014146868A | 2014-08-14 | |||
| JP2008066903A | 2008-03-21 | |||
| JP2005151289A | 2005-06-09 |
Attorney, Agent or Firm:
TODA Yuji (JP)
Download PDF:
Previous Patent: DEVICE MANAGEMENT APPARATUS, DEVICE MANAGEMENT METHOD, AND PROGRAM
Next Patent: FUEL INJECTION DEVICE
Next Patent: FUEL INJECTION DEVICE