Autonomous Vehicle Fleet Stop Control for Cyberattack Response

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing vehicle operation systems fail to effectively secure user safety during cyber attacks on autonomous service vehicles, leading to potential service disruptions and user inconvenience.

Innovation Solution

An operation management apparatus with a communication part and processing part that detects abnormal vehicle behavior, transmitting stop signals to all managed vehicles upon receiving an abnormal communication incidence signal from a compromised vehicle, while only stopping the compromised vehicle if no signal is received, thereby minimizing service disruptions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a stop signal is transmitted to all vehicles when an abnormal vehicle is detected, then user safety is secured, but service continuity deteriorates

Engineering Contradiction:

Improveuser safetyVSAvoidservice continuity

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system segments the response action based on the type of abnormality detected. When abnormal communication is detected, a stop signal is transmitted to all vehicles. When other abnormalities are detected, only the abnormal vehicle receives a stop signal. This segmentation allows differentiated response strategies to balance safety and service continuity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system dynamically adjusts the scope of the stop signal transmission based on the detected abnormality type. The processing part determines whether to issue a fleet-wide stop signal or a vehicle-specific stop signal in real-time based on the nature of the abnormal communication or other abnormalities detected.

Inventive Principle:

Principle #15Dynamics

2Productivity

If a stop signal is transmitted to only the abnormal vehicle, then service continuity is maintained, but user safety may be compromised

Engineering Contradiction:

Improveservice continuityVSAvoiduser safety

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Inventive Principle:

Principle #15Dynamics

3Reliability

If the system transmits stop signals to all vehicles upon any abnormality, then user safety is prioritized, but service disruption increases

Engineering Contradiction:

Improveuser safetyVSAvoidservice disruption

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Inventive Principle:

Principle #15Dynamics

4Productivity

If the system transmits stop signals to only the abnormal vehicle, then service disruption is minimized, but detection precision requirements increase

Engineering Contradiction:

Improveservice disruptionVSAvoidabnormality detection precision

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS20250104556A1Operation management apparatus, operation management method, and nontransitory computer recording medium

Publication Date: 2025.03.27 TOYOTA JIDOSHA KK

AI summary

An operation management apparatus configured to manage the operation of a plurality of vehicles capable of autonomous driving includes a communication part configured to be able to communicate with the vehicles and a processing part. The processing part is configured to detect the presence of any abnormal vehicle exhibiting abnormal behavior from among the plurality of vehicles and, if detecting the presence of an abnormal vehicle, to transmit a stop signal to the vehicles whose operation is being managed for ordering them to stop when receiving from the abnormal vehicle an abnormal communication incidence signal informing it that there has been abnormal communication different from the usual communications to the abnormal vehicle and to transmit the stop signal to only the abnormal vehicle when not receiving from the abnormal vehicle the abnormal communication incidence signal.