AUTOSAR Ethernet Spoofing Detection via Device Driver MAC Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack effective methods to detect and mitigate spoofed Ethernet frames within the Automotive Open System Architecture (AUTOSAR) communication stack, which is critical for ensuring the security and reliability of automated driving systems.
Innovation Solution
A system and method that utilize a device driver to receive Ethernet frames from the AUTOSAR communication stack, extract and compare the source MAC address with authorized addresses, and transmit a cancelation command to the stack when a spoofed frame is detected, thereby preventing unauthorized data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Ethernet frames are processed without spoofing detection in the AUTOSAR communication stack, then processing speed and system simplicity are maintained, but security and reliability of automated driving systems deteriorate due to unauthorized data transmission
Solution Approach 1:
The patent segments the Ethernet frame processing by separating the detection function from the main AUTOSAR communication stack. The device driver layer is divided into an authentication submodule that specifically handles spoofing detection, while the rest of the stack processes frames normally. This segmentation allows security enhancement without requiring complex modifications throughout the entire stack.
Solution Approach 2:
The patent introduces an intermediary authentication submodule within the device driver that acts as a mediator between the Ethernet interface and the AUTOSAR communication stack. This submodule intercepts incoming frames, performs MAC address authentication against authorized addresses stored in memory, and either forwards legitimate frames or generates cancelation commands for spoofed frames, thereby protecting the stack without direct integration complexity.
2Reliability
If MAC address extraction and comparison is performed at the device driver level, then spoofed frames are detected effectively, but processing time and computational resources increase
Solution Approach 1:
The patent implements preliminary action by pre-storing authorized MAC addresses in memory before runtime operation. During frame processing, the authentication submodule only needs to extract the source MAC address and compare it against the pre-loaded authorized list, rather than performing complex verification calculations. This preliminary preparation significantly reduces the time required for each frame's authentication.
Solution Approach 2:
The patent extracts only the essential authentication function (MAC address comparison) from the main processing flow and places it in a dedicated authentication submodule. By extracting just the source MAC address from the Ethernet frame header and comparing it against stored authorized addresses, the system performs minimal necessary processing rather than analyzing entire frames, thereby reducing time loss while maintaining detection accuracy.
3Reliability
If cancelation commands are propagated through the entire AUTOSAR communication stack, then spoofed frames are completely blocked, but system complexity and communication overhead increase
Solution Approach 1:
The patent implements a feedback mechanism where the authentication submodule continuously monitors incoming frames and provides real-time feedback by generating cancelation commands when spoofing is detected. This cancelation command is propagated back through the communication stack to block the spoofed frame at appropriate levels. The feedback loop ensures effective mitigation while maintaining simple propagation paths that only activate when needed, avoiding continuous complex communications.
Data Source
AI summary
A system comprises a computer including a processor and a memory. The memory includes instructions such that the processor is programmed to: receive, at a device driver, an Ethernet frame from an Automotive Open System Architecture (AUTOSAR) communication stack, determine, at the device driver, whether the Ethernet frame is a spoofed Ethernet frame, and transmit a cancelation command to at least one layer of the AUTOSAR communication stack when the device driver determines the Ethernet frame is spoofed.