Abstract: Examples of a computer system for malware detection and recovery include a computer having a processor and a memory having untrusted partition having untrusted data files and a trusted partition connected to the untrusted partition and having a backup application. The trusted partition may not be modifiable by the untrusted partition. The computer may be configured to detect whether a malware attack of the untrusted partition has occurred. In accordance with detecting that the malware attack has not occurred, the computer creates a trusted backup by storing at least some untrusted data files to a backup memory that is not modifiable by the untrusted partition. In accordance with detecting that the malware attack has occurred, the computer may prevent the creation of an additional trusted backup and may restore compromised files from the trusted backup.

Abstract: A cryptographic scheme to provide sender identification on an automotive on-board communication bus has been recently introduced. That protocol is vulnerable to a malicious gateway though. This methodology uses hash-chains to provide sender identification in an automotive on-board communication bus that can be applied to protect the entire communication bus and allows the use of network gateways.

Abstract: A method of communicating via a vehicle communication network includes providing an electronic control unit (ECU), the ECU including a main processing unit and a security processing unit, the security processing unit including a symmetric security key, attempting a secure boot of the main processing unit, providing use of the symmetric security key to the main processing unit if the secure boot of the main processing unit is successful, preventing use of the symmetric security key by the main processing unit if the secure boot of the main processing unit is not successful, conducting, via an attestation processing unit, a remote attestation of the main processing unit, and determining, via the attestation processing unit, whether the secure boot of the main processing unit was successful according to the remote attestation.

Abstract: A method of communicating via a vehicle communication network includes providing an electronic control unit (ECU), the ECU including a main processing unit and a security processing unit, the security processing unit including a symmetric security key, attempting a secure boot of the main processing unit, providing use of the symmetric security key to the main processing unit if the secure boot of the main processing unit is successful, preventing use of the symmetric security key by the main processing unit if the secure boot of the main processing unit is not successful, conducting, via an attestation processing unit, a remote attestation of the main processing unit, and determining, via the attestation processing unit, whether the secure boot of the main processing unit was successful according to the remote attestation.

Abstract: In embodiments, a vehicle communication network may include a remote computer server, a vehicle including, a plurality of sensors, a wireless communication transceiver, and/or an electronic control unit (ECU) that may be configured to control operation of the vehicle and obtain information from the plurality of sensors. The ECU may be configured to analyze, via machine learning, the information from the plurality of sensors and to control the vehicle according to the analysis. The remote server may be configured to analyze, via machine learning, the information from the plurality of sensors and other vehicle information from sensors of other vehicles to detect an error.

Abstract: A cryptographic scheme to provide sender identification on an automotive on-board communication bus has been recently introduced. That protocol is vulnerable to a malicious gateway though. This methodology uses hash-chains to provide sender identification in an automotive on-board communication bus that can be applied to protect the entire communication bus and allows the use of network gateways.

Abstract: In one embodiment, a system for providing privacy protection of biometric related information for an occupant in a vehicle is provided. The system includes a memory device and at least one controller. The at least one controller including the memory device and is configured to receive first biometric information for a vehicle occupant from a plurality of biometric sensors positioned within a seat of the vehicle and to receive a first signal indicative of a first privacy setting from a plurality of privacy settings to share the first biometric information. The at least one controller is further configured to transmit the first biometric information internally within the vehicle in response to the first signal and to prevent the first biometric information from being transmitted externally from the vehicle in response to the first signal.

Abstract: A system and method are described for secure communications between controllers in a vehicle network. The system includes multiple controllers associated in a group and configured to communicate with each other, each having an initial controller identification (ID) number and configured to communicate with a gateway controller. Each controller in the group is configured to calculate an updated controller ID number and transmit the updated controller ID to the gateway controller in a secure fashion, and the gateway controller is configured to authenticate and transmit the updated controller ID of each controller in the group to all the controllers in the group in a secure fashion. Each controller in the group is further configured to include its updated controller ID in network messages transmitted to other controllers in the group, and to authenticate other controllers in the group based on the updated controller IDs in network messages from other controllers.

Abstract: In embodiments, a vehicle communication network may include a remote computer server, a vehicle including, a plurality of sensors, a wireless communication transceiver, and/or an electronic control unit (ECU) that may be configured to control operation of the vehicle and obtain information from the plurality of sensors. The ECU may be configured to analyze, via machine learning, the information from the plurality of sensors and to control the vehicle according to the analysis. The remote server may be configured to analyze, via machine learning, the information from the plurality of sensors and other vehicle information from sensors of other vehicles to detect an error.

Abstract: In one embodiment, a system for providing privacy protection of biometric related information for an occupant in a vehicle is provided. The system includes a memory device and at least one controller. The at least one controller including the memory device and is configured to receive first biometric information for a vehicle occupant from a plurality of biometric sensors positioned within a seat of the vehicle and to receive a first signal indicative of a first privacy setting from a plurality of privacy settings to share the first biometric information. The at least one controller is further configured to transmit the first biometric information internally within the vehicle in response to the first signal and to prevent the first biometric information from being transmitted externally from the vehicle in response to the first signal.

Abstract: A vehicle interface docking system for dedicated short range communication equipped user device in a vehicle. The vehicle interface docking system includes a cradle mount mountable to the vehicle within line of sight of an operator. The cradle mount retains the dedicated short range communication equipped user device. The system further includes an antenna operably connectable with the dedicated short range communication equipped user device, a power source operably connectable with the dedicated short range communication equipped user device, a communications interface providing a communications pathway between the dedicated short range communications equipped user device and a controller area network of the vehicle and the antenna, and a central processing unit executing a vehicle-to-everything program.

Abstract: Apparatus and methods for attacking a screening algorithm. Content to be downloaded is identified. The identified content is then partitioned into at least two sections, wherein each of the at least two sections has a duration which is less than a duration of a threshold duration value assigned by the screening algorithm, and the partitioned content is subjected to a screening algorithm. Once the content has been successfully downloaded, the integrity of the downloaded content may be restored by reassembling the sections.

Abstract: A method for authorizing the rendering of a digital recording. A first section and a last section of a track is first identified. A watermark is then decoded from the first and last sections of the track. It is then determined if at least one reserved bit is marked in the watermark in each of the first and last sections of the track. If so, it is determined if the sequence IDs of sections interposed between the first and last sections of the track are in sequential order. If both conditions are met, the rendering is authorized.

Abstract: A method and apparatus are disclosed for preventing noise from influencing a random number generator that is based on the meta-stable behavior of flip-flops. External noise will affect multiple flip-flops in a larger random number generator circuit in the same way, since they are physically close. Thus, the ability to influence the operation of a random number generator using external noise is reduced by incorporating a plurality of flip-flops, referred to herein as core random elements, in a single random number generator. If one of the core random elements in a random number generator is influenced by noise, all of the core random elements will be influenced by the noise. Thus, if all (or most) of the core random elements issue a random bit at the same time, there is a possibility that the random number generator was influenced by noise, and all the issued bits are discarded.

Abstract: A method and apparatus are disclosed for preventing noise from influencing a random number generator that is based on the meta-stable behavior of flip-flops. External noise will affect multiple flip-flops in a larger random number generator circuit in the same way, since they are physically close. Thus, the ability to influence the operation of a random number generator using external noise is reduced by incorporating a plurality of flip-flops, referred to herein as core random elements, in a single random number generator. If one of the core random elements in a random number generator is influenced by noise, all of the core random elements will be influenced by the noise. Thus, if all (or most) of the core random elements issue a random bit at the same time, there is a possibility that the random number generator was influenced by noise, and all the issued bits are discarded.

Abstract: A method for authorizing the rendering of a digital recording. A first section and a last section of a track is first identified. A watermark is then decoded from the first and last sections of the track. It is then determined if at least one reserved bit is marked in the watermark in each of the first and last sections of the track. If so, it is determined if the sequence IDs of sections interposed between the first and last sections of the track are in sequential order. If both conditions are met, the rendering is authorized.

Abstract: Apparatus and methods for attacking a screening algorithm. Content to be downloaded is identified. The identified content is then partitioned into at least two sections, wherein each of the at least two sections has a duration which is less than a duration of a threshold duration value assigned by the screening algorithm, and the partitioned content is subjected to a screening algorithm. Once the content has been successfully downloaded, the integrity of the downloaded content may be restored by reassembling the sections.