Networked communication control for vehicles

Abstract

The present disclosure provides "Networked communication control for vehicles". A vehicle comprising a lower security network (LSN) and a higher security network (HSN) with parallel read-only filters and paths between the LSN and the HSN to correspond exclusively transfer data from the LSN to the HSN and from the HSN to the LSN. The vehicle comprises a gateway controller configured to change a duty cycle associated with the filters as a function of utilization of the HSN to change a data rate through the filters rather than through the paths.

Description

Technical Field

[0001] This disclosure relates to networked communication control for vehicles. Background Technology

[0002] The vehicle may include an internet-facing network and a controller area network (CAN). These two networks may have an air gap to prevent malicious content residing on the internet-facing network from entering the CAN, thereby preventing the CAN from using valuable user input and data residing on the internet-facing network. Summary of the Invention

[0003] A vehicle includes a lower security network (LSN) and a higher security network (HSN), with parallel read-only filters and paths between the LSN and the HSN to exclusively transmit data from the LSN to the HSN and from the HSN to the LSN, respectively. The vehicle includes a gateway controller configured to change the duty cycle associated with the filters based on the utilization of the HSN, thereby altering the data rate through the filters rather than through the paths.

[0004] One method includes, via a gateway controller, varying the duty cycle associated with a read-only filter between a lower security network (LSN) and a higher security network (HSN), wherein the LSN and HSN have parallel filters and paths, to exclusively transmit data from the LSN to the HSN accordingly. The variation is based on the utilization rate of the HSN to change the data rate passing through the filter rather than through the path.

[0005] One method includes, via a gateway controller, changing the duty cycle corresponding to the clock rate of a read-only filter between a lower security network (LSN) and a higher security network (HSN) of a vehicle, wherein the LSN and the HSN have the filter. The filter and the path are parallel to transmit data from the LSN to the HSN in a correspondingly exclusive manner. The change is based on the utilization rate of the HSN, such that the data rate passing through the filter is changed instead of the data rate passing through the path. Attached Figure Description

[0006] Figure 1 This is an overview of the vehicle communication system;

[0007] Figure 2 This is an example of data being repackaged using a read-only filter; and

[0008] Figure 3 It is an algorithm used to change the network utilization of HSN. Detailed Implementation

[0009] Embodiments of this disclosure are described herein. However, it should be understood that the disclosed embodiments are merely examples, and other embodiments may take various and alternative forms. The drawings are not necessarily drawn to scale; some features may be enlarged or minimized to show details of particular components. Therefore, the specific structural and functional details disclosed herein should not be construed as limiting, but merely as a representative basis for teaching those skilled in the art to employ the invention in different ways. As will be understood by those skilled in the art, various features shown and described with reference to any of the accompanying drawings may be combined with features shown in one or more other drawings to produce embodiments not explicitly shown or described. The combinations of features shown provide representative embodiments for typical applications. However, particular applications or implementations may expect various combinations and modifications of features consistent with the teachings of this disclosure.

[0010] This allows vehicles to bridge air gaps via mask-based read-only memory and other information control methods. For example, a mask-based read-only memory can be placed between a lower security network (LSN) and a higher security network (HSN) to control data flow between the networks. Additionally, unrestricted unidirectional data can be transmitted from the HSN to the LSN. This means that data flow is restricted when entering the HSN but unimpeded when leaving it. In effect, data flow control can enable bidirectional communication between the LSN and HSN without sacrificing the confidentiality, integrity, and availability of the HSN.

[0011] refer to Figure 1 The image shows vehicle 100. Vehicle 100 is connected to communication infrastructure 102. Communication infrastructure 102 enables access to network 104. Network 104 may be the Internet. Network 104 can provide information to the vehicle's communication modules. For example, WAN access 112 may be available on LSN 110.

[0012] LSN 110 includes a communication module. This module can be a combination of software and hardware for providing specified functions. LSN 110 may include a communication unit 114 for providing WAN access via its hardware and software, and a radio transceiver 118. LSN 110 may include a telematics unit 116, which may include trailer tracking, container tracking, vehicle tracking, fleet management, or other functions. LSN 110 may include an entertainment unit 120 for providing hardware and software to display location data from GPS module 122 or other audio and visual entertainment programs. LSN 110 may include a user interface module 124 for providing a human-machine interface between the vehicle system and the user. As technology changes and develops, LSN 110 may include other modules. For example, passenger devices may be allowed to access the LSN, making information and input available to passengers via their personal devices (e.g., cellular phones, tablets). LSN 110 can transmit any communication protocol, including Internet Protocol (IP) or Transmission Control Protocol (TCP).

[0013] Figure 1 HSN 130 is also disclosed. HSN 130 may include various modules for controlling the vehicle. HSN 130 may include a climate control module 132. Climate control module 132 can control the operation of the vehicle's heating, ventilation, and cooling. The climate control module can control the compressor, coolant, dampers, or other aspects necessary to provide the required temperature to the vehicle's passengers. HSN may include a battery electronics module (BECM) 134. BECM 134 can control the power supply to the vehicle battery in the hybrid vehicle or manage battery charging. HSN 130 may include a vehicle body control module 136. Vehicle body control module 136 can control various vehicle lighting or door systems. For example, vehicle body control module 136 can control headlights and brake lights. HSN 130 may include a powertrain control module 138. Powertrain control module 138 can control the drive system of vehicle 100. For example, powertrain control module 138 can control vehicle acceleration or determine whether the vehicle is propelled by an internal combustion engine, a battery pack, or a combination thereof. The HSN 130 can transmit any communication protocol, including Internet Protocol (IP) or Transmission Control Protocol (TCP), and the HSN can also communicate using the Controller Area Network (CAN) protocol.

[0014] Read-only filter 128 can be positioned between LSN 110 and HSN 130. This means that information on LSN 110 can only flow to HSN 130 if it is included in a predetermined instruction set supported by filter 128 or otherwise supported. Filter 128 can be any combination of available rewritable and read-only memory. The read-only portion of the filter can be a mask ROM. The filter can be implemented at any OSI layer.

[0015] Filter 128 may have a read-only portion, such that all communication from LSN 110 and HSN is predetermined. Filter 128 may have a rewritable portion, such that communication requests identified by filter 128 from LSN 110 can be updated via authorized or signed communication.

[0016] The read-only portion of filter 128 may have a predetermined set of instructions designed to receive information from the rewritable portion and generate messages on HSN 130. For example, filter 128 may receive or listen to communications on LSN 110. The communications may be matched to a communication request identified by filter 128.

[0017] The rewritable portion of filter 128 can use digital outputs to send these communication requests to the read-only portion of filter 128. This means that the register set is updated on the read-only portion by a true or false bit. When a specific bit on a register in the read-only portion is true, the read-only portion of filter 128 sends communication on HSN 130. For example, the registers may correspond to a predetermined set of instructions for creating HSN protocol messages. This means that user interface module 124 can send a communication request on LSN 110 to increase the temperature via climate control module 132. The communication request can be received by filter 128 as an IP packet and recognized by the rewritable portion of filter 128. The rewritable portion of filter 128 can send digital outputs to write to registers on the read-only portion of filter 128 corresponding to the temperature increase and the amount of increase. The read-only portion of filter 128 recognizes these register inputs and sends communication on HSN 130 corresponding to the user request. The sent communication can be packaged into CAN messages recognizable by the climate control module of HSN. Therefore, only the predetermined instruction set is sent on the HSN 130, thereby preventing the loss of confidentiality, integrity and availability on the HSN 130.

[0018] The rewritable portion of filter 128 can use a communication protocol to send these communication requests to the read-only portion of filter 128. This means that once a communication request is recognized by filter 128, its IP header and communication request message are stripped from the packet received by the rewritable portion of filter 128, and the original data packet is packaged into an HSN 130 communication protocol (e.g., a CAN frame), such as... Figure 2 As shown. Therefore, the read-only filter strips the payload from the packet on LSN 110 and repackages the payload using the HSN protocol, thereby preventing loss of confidentiality, integrity, and availability of HSN 130.

[0019] It should be understood that any module may be included on an LSN or HSN. LSN and HSN are names indicating an information control solution. A particular module may or may not be present, or may reside on networks with different security levels. For example, a portion of the user interface module 124 may be partitioned, allowing a user to interact with the climate control module 132 on HSN 130. Another partition of the user interface module 124 may allow interaction with the entertainment unit. This means that specific module names and naming conventions can be distributed across the data flow portion of this disclosure. Therefore, any module or portion thereof may be on either network 110, 130; however, data flow from LSN 110 to HSN 130 passes through filter 128.

[0020] The read-only portion of filter 128 may include clock 154. This clock controls the execution of data on HSN 130. This means that as the clock frequency increases, more data is transmitted from filter 128 to HSN 130. Gateway module 150 can monitor the utilization of HSN 130. For example, gateway module 150 can monitor the spanport of HSN 130 to measure the traffic volume on HSN 130. Gateway module 150 sends control signal 152 to the read-only portion of filter 128. Control signal 152 may be a duty cycle specifying the clock rate of clock 154 or digital communication. In effect, control signal 152 specifies the network transmission rate of filter 128 to prevent denial of service or other excessively heavy communication on the HSN.

[0021] Figure 1 The network topology may include a path 142 parallel to filter 128. Path 142 may be a unidirectional communication path implemented at any OSI layer. Path 142 may only transmit communication from HSN 130 to LSN 110. This ensures enhanced bidirectional communication between LSN 110 and HSN 130. A translator may be provided to convert CAN protocol messages on HSN 130 into TCP / IP messages on LSN 110. Path 142 may be an optical fiber. Path 142 may be optically isolated to block communication from LSN 110 to HSN 130.

[0022] refer to Figure 2The diagram illustrates IP datagram 201 and CAN datagram 201. IP datagram 201 includes: a header comprising version 200, header length 202, type 204, total length 206, identifier 208, tag 210, fragment offset 212, dwell time 214, protocol 216, checksum 218, source address 220, destination address 222, options 224, and padding characters 226; and a data portion 228. The rewritable portion of filter 128 can be configured to treat a portion of IP datagram 201 as an indication of a requested transmission. For example, the destination address could be filter 128 itself. The data portion 228 can be parsed by filter 128 to also indicate a valid hash of the communication request. Other methods can be used to determine whether communication has been requested. In response to identifying a valid request, the rewritable portion of filter 128 can send payload information or a Boolean output to enable the read-only portion of filter 128. A combination of payload transmission and Boolean output can be used, as described above. If a request is made to send the entire payload of IP datagram 201, then data portion 228 or a portion thereof can be sent to the read-only portion of filter 128. The read-only portion of the filter can extract destination information from the data portion 228 of the payload and rewrite the control 254 and arbitration fields 252 of CAN datagram 250. The remaining data from data portion 228 can be placed in data segment 256. If necessary, and according to control signal 152, data portion 228 can be decomposed into multiple CAN messages 250. Extended frame CAN format can also be used.

[0023] refer to Figure 3 The diagram shows Algorithm 300. Algorithm 300 begins in step 302. In step 304, network analysis is performed to determine quality of service or network utilization. This analysis may include network traffic and collision levels. In step 306, the controller determines whether the network utilization is below a predetermined threshold. The predetermined threshold may be variable. The predetermined threshold may be lower than 100% network utilization. The predetermined threshold may be set based on the operating conditions of vehicle 100. For example, the predetermined threshold may be reduced during startup and shutdown. If the network utilization is below the predetermined threshold, then in step 310, the controller may increase the duty cycle control signal 152. If the network utilization is above the predetermined threshold, then the controller may decrease the duty cycle of control signal 152.

[0024] The terms used in this specification are descriptive and not limiting, and it should be understood that various changes may be made without departing from the spirit and scope of this disclosure. As previously stated, features of various embodiments may be combined to form other embodiments of the invention that are not explicitly described or shown. While various embodiments may be described as providing advantages over or being preferred over other embodiments or prior art implementations with respect to one or more desired characteristics, those skilled in the art will recognize that trade-offs may be made to one or more features or characteristics to achieve the desired overall system properties, depending on the specific application and implementation. These properties may include, but are not limited to, cost, strength, durability, lifecycle cost, marketability, appearance, packaging, size, maintainability, weight, manufacturability, ease of assembly, etc. Therefore, embodiments described as less desirable than other embodiments or prior art implementations with respect to one or more characteristics are not outside the scope of this disclosure and may be ideal for a particular application.

[0025] According to one embodiment of the present invention, the path is optically isolated.

[0026] According to one embodiment of the present invention, the path is an optical fiber.

[0027] According to one embodiment of the present invention, the filter strips the payload from the packets on the LSN and repackages the payload using the HSN protocol.

[0028] According to one embodiment of the present invention, the filter receives a communication request from the LSN and sends a corresponding instruction from a predetermined instruction set on the HSN.

[0029] According to the present invention, a method includes: via a gateway controller, changing the duty cycle associated with a filter between a lower security network (LSN) and a higher security network (HSN) based on the utilization of the HSN, wherein the LSN and the HSN have parallel filters and paths to transmit data from the LSN to the HSN respectively exclusively, so as to change the data rate through the filter rather than through the path.

[0030] According to an embodiment, the filter includes a mask model read-only memory.

[0031] According to an embodiment, the path is optically isolated.

[0032] According to an embodiment, the path is an optical fiber.

[0033] According to an embodiment, the filter strips the payload from the packets on the LSN and repackages the payload using the HSN protocol.

[0034] According to an embodiment, the filter receives a communication request from the LSN and sends a corresponding instruction from a predetermined instruction set on the HSN.

Claims

1. A vehicle, the vehicle comprising: A read-only filter is placed between a lower-security network (LSN) and a higher-security network (HSN) and is configured to: receive a communication request from the LSN and send a corresponding instruction to the HSN, the corresponding instruction including a predetermined set of instructions based on the communication request from the LSN; A one-way communication path is arranged in parallel with the read-only filter and configured to exclusively transmit data from the HSN to the LSN; as well as The gateway controller is configured as follows: Monitor the traffic on the HSN. In response to the traffic on the HSN exceeding a predetermined threshold, the duty cycle associated with the read-only filter is changed based on the utilization of the HSN to alter the data rate through the read-only filter instead of through the unidirectional communication path. Specifically, the read-only filter strips the payload from the communication request on the LSN and repackages the payload in the predetermined instruction set using the HSN protocol. The read-only filter includes a mask model read-only memory.

2. The vehicle as claimed in claim 1, wherein, The duty cycle corresponds to the clock rate of the read-only filter.

3. The vehicle as claimed in claim 1, wherein, The unidirectional communication path is optically isolated.

4. The vehicle as claimed in claim 3, wherein, The one-way communication path is an optical fiber.

5. A method for networked communication control of a vehicle, the method comprising: Through the gateway controller Monitor traffic on high-security networks (HSNs). In response to the traffic on the HSN exceeding a predetermined threshold, the duty cycle associated with the read-only filter is changed between the lower security network LSN and the HSN based on the utilization of the HSN. Parallel read-only filters and unidirectional communication paths are arranged between the LSN and the HSN to exclusively transmit data from the LSN to the HSN, thereby changing the data rate through the read-only filter instead of through the unidirectional communication path. The read-only filter receives a communication request from the LSN and sends a corresponding instruction to the HSN. The corresponding instruction includes a predetermined set of instructions based on the communication request from the LSN. Specifically, the read-only filter strips the payload from the communication request on the LSN and repackages the payload in the predetermined instruction set using the HSN protocol. The read-only filter includes a mask model read-only memory.

6. The method of claim 5, wherein, The duty cycle corresponds to the clock rate of the read-only filter.

Images