Adaptive Prediction Range for Vehicle Network Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting unauthorized operations in vehicle networks, such as CAN, face challenges in accurately distinguishing between legitimate and unauthorized communication due to delays caused by aperiodic communication events, leading to potential misdetection of legitimate periodic communication as an attack.
Innovation Solution
An information processing apparatus is configured to determine the type of communication messages, assess the relatedness between aperiodic and periodic communications, and adjust the prediction range for reception times to correctly identify delayed messages as legitimate periodic communication, using a communication determination unit and abnormality determination unit to manage flags and update prediction ranges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the accuracy of predicting periodic communication is improved, then the accuracy of detecting attacks improves, but legitimate communication may be misdetected due to delays caused by increased aperiodic communication
Solution Approach 1:
The patent applies dynamics by making the prediction range adaptive rather than fixed. The abnormality determination unit dynamically adjusts the prediction range based on actual communication patterns, allowing the system to accommodate variable delays caused by aperiodic communication while maintaining attack detection capability. This resolves the contradiction by enabling the system to adapt to changing communication conditions without sacrificing detection accuracy.
Solution Approach 2:
The patent changes the parameter of prediction range flexibility. Instead of using a fixed prediction window, the system adjusts the prediction range parameters to account for delays introduced by aperiodic communication events. This allows legitimate delayed messages to fall within the adjusted prediction range, preventing false positives while maintaining the ability to detect genuine attacks.
2Adaptability or versatility
If aperiodic communication increases, then connectivity and functionality improve, but delays in periodic communication occur leading to misdetection
Solution Approach 1:
The patent applies beforehand cushioning by establishing an abnormality determination unit that proactively accounts for potential delays before they cause misdetection. The system prepares by creating a flexible prediction range that cushions against the impact of aperiodic communication delays, allowing periodic messages to arrive late without being flagged as attacks. This resolves the time loss issue by anticipating and accommodating delays in advance.
3Device complexity
If simple message counting is used, then detection complexity is reduced, but accuracy in determining legitimate communication decreases
Solution Approach 1:
The patent introduces an intermediary abnormality determination unit that acts as a mediator between simple message counting and accurate legitimacy determination. This intermediary layer analyzes communication patterns, determines relatedness between messages, and adjusts prediction ranges, thereby bridging the gap between simple detection methods and accurate legitimacy verification without requiring complex additional infrastructure.
Data Source
AI summary
An information processing apparatus capable of aperiodic communication and periodic communication, provided with a communication determination unit that determines a type of a communication message; a first processing determination unit that determines relatedness between aperiodic communication and periodic communication by using a first communication message for which the type is determined to be aperiodic communication, and a prediction range for an amount of time for receiving a second communication message for which the type is determined to be periodic communication; and a second processing determination unit that determines that the second communication message is legitimate communication for periodic communication in a case where the periodic communication second communication message determined to have relatedness is in the prediction range a predetermined amount of time later.