Backup Vehicle Control for EMI and Cyber-Attack Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles are vulnerable to electromagnetic interference (EMI) and cyber-attacks, which can disrupt critical automation systems, posing safety risks to the vehicle and its occupants.
Innovation Solution
A backup control system with a computing device installed on the vehicle detects anomalous events such as EMI or cyber-attacks, performs a threat assessment, and initiates mitigating actions to reduce the danger, including disabling or altering the operation of affected automation systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If automation systems are used to control autonomous vehicle operations, then productivity and ease of operation are improved, but reliability and safety are worsened due to vulnerability to EMI and cyber-attacks
Solution Approach 1:
The control system is divided into separate modules: primary automation system for normal operation and backup control system for anomaly response. This segmentation allows each system to specialize in its function while maintaining overall system safety through isolation of critical functions.
Solution Approach 2:
The backup control system performs preliminary threat assessment and anomaly detection before critical failures occur. By continuously monitoring for EMI and cyber-attack indicators and preparing mitigating actions in advance, the system can respond quickly to threats before they compromise vehicle safety.
2Reliability
If backup control systems are added to mitigate EMI and cyber-attack risks, then reliability and safety are improved, but device complexity increases
Solution Approach 1:
The backup control system integrates multiple functions into a unified architecture: anomaly detection, threat assessment, and mitigating action execution are combined in a single coordinated system. This merging reduces overall complexity compared to having separate independent systems for each function while maintaining comprehensive safety coverage.
Solution Approach 2:
The backup control system performs self-assessment of threats and automatically executes mitigating actions without requiring external intervention. This self-service capability reduces the need for additional external monitoring systems and simplifies the overall control architecture by making the backup system autonomous in its safety functions.
3Ease of operation
If the vehicle relies on over-the-air communications and satellite detection, then ease of operation and functionality are improved, but the system becomes more vulnerable to EMI and cyber-attacks
Solution Approach 1:
The backup control system acts as an intermediary layer between the communication/satellite systems and the critical vehicle control functions. It monitors incoming data for anomalies and filters out potential EMI or cyber-attack effects before they reach the primary control systems, protecting the vehicle while maintaining full communication functionality.
Solution Approach 2:
The system applies preliminary countermeasures by detecting EMI and cyber-attack patterns before they can disrupt vehicle operations. By identifying anomalous events in communications and satellite data early and executing mitigating actions proactively, the system neutralizes threats before they compromise the autonomous driving functionality.
Data Source
AI summary
A backup control server for reducing dangers to automation systems of autonomous vehicles includes a memory and a processor. The processor is programmed to detect an anomalous event which may include one of a geomagnetic interference event and a cyber-attack event. The processor may also be programmed to perform a threat assessment for the anomalous event relative to an automation system of a vehicle. The automation system may be configured to control an aspect of autonomous operation of the vehicle. The processor may be further programmed to determine one or more mitigating actions to perform on the automation system based upon the threat assessment. The one or more mitigating actions are configured to reduce a danger to the vehicle presented by the anomalous event. The processor may also be programmed to transmit to the vehicle instructions to perform one or more mitigating actions on the automation system.