Air-Gap Device for Cyber Isolating Mobility Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Motor vehicles are vulnerable to cyber threats due to compromised software applications in their mobility systems, and deploying software security updates across a vehicle fleet is challenging due to limited access and the risk of real-time cyber-attacks on critical systems.
Innovation Solution
An air-gap device is introduced to isolate cyber mobility systems when a vehicle is in motion by creating a physical separation between critical mobility ECUs and the rest of the vehicle's communication network, using a housing with input and output ports connected to a secure gateway and mobility ECUs, and activating an air gap when the vehicle is determined to be in motion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software security updates are deployed across vehicle fleet, then cybersecurity protection is improved, but access limitations and deployment complexity increase
Solution Approach 1:
The patent segments the vehicle network into two isolated domains: a mobility domain containing critical ECUs (powertrain, chassis, ADAS) and a convenience domain containing non-critical systems (infotainment, telematics). This segmentation allows security updates to be deployed selectively to the mobility domain without affecting the entire vehicle network, reducing deployment complexity while maintaining security.
Solution Approach 2:
The air-gap device acts as an intermediary between the mobility domain and convenience domain. It physically isolates the mobility domain from external network connections while allowing controlled communication when needed. This intermediary structure simplifies security update deployment by limiting the attack surface and providing a controlled interface for updates.
2Ease of operation
If network connections are maintained for software updates, then access for updates is improved, but vulnerability to real-time cyber-attacks increases
Solution Approach 1:
The air-gap device dynamically adjusts its isolation state based on operational conditions. It maintains physical isolation (air-gap) during normal operation to prevent attacks, but can temporarily open the connection when security updates are required. This dynamic behavior allows the system to balance accessibility for updates with protection against real-time attacks.
Solution Approach 2:
The system implements periodic security isolation by maintaining the air-gap closed during normal operation and only opening it temporarily when updates are needed. This periodic isolation pattern ensures that the system is protected against attacks during the majority of operational time while still allowing necessary update operations to occur.
3Ease of operation
If air-gap is closed for connectivity, then network access is improved, but security protection during motion is reduced
Solution Approach 1:
The air-gap device dynamically responds to vehicle motion status by automatically closing the air-gap when motion is detected and opening it when the vehicle is stationary. This dynamic adaptation ensures that security protection is automatically enforced during motion without requiring manual intervention, while maintaining network access when the vehicle is parked.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An air-gap device for isolating mobility systems when a vehicle is in motion may include a housing. The housing may include various input ports and various output ports. The various input ports may include connections to a secure gateway. The various output ports may include connections to one or more mobility Electronic Control Units (ECUs). The air-gap device may include at least one pair of terminal contacts. The at least one pair of terminal contacts may include a first terminal contact and a second terminal contact. The air-gap device may include an air gap embedded in the housing. The air gap may be open when the first terminal is not in contact with the second terminal contact. The air-gap device may be instructed to open the air gap when the vehicle is determined to be in motion or about to be in motion.