Bandwidth-Adaptive Log Collection for Vehicle Network Virus Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicle networks with multiple electronic control units (ECUs) connected via a CAN, existing monitoring systems face challenges in efficiently collecting log messages to detect and remove viruses without reducing bandwidth for normal communication, especially when resource load is high or bandwidth is limited.
Innovation Solution
An information processing apparatus with a processing monitoring unit that includes a system load monitoring unit and a virus monitoring unit, which adjusts log collection based on available bandwidth, prioritizing high-priority messages when bandwidth is limited to ensure efficient virus detection and removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If log information is collected from all ECUs to perform virus detection, then virus detection capability is improved, but network bandwidth is reduced causing congestion and delays in normal control messages
Solution Approach 1:
The patent applies local quality by assigning different collection priorities to different log messages based on their importance. High-priority log messages (those essential for virus detection and system safety) are collected with higher priority, while low-priority messages are collected with lower priority or skipped when bandwidth is limited. This selective collection based on local message characteristics resolves the contradiction by ensuring virus detection capability is maintained through high-priority message collection while normal control message transmission is preserved through low-priority message deprioritization.
2Productivity
If high-priority log messages are selectively collected when resource load is high, then network bandwidth is preserved for normal communication, but log information required for virus countermeasures may be missed
Solution Approach 1:
The patent applies dynamics by making the log message collection priority dynamic rather than static. The collection priority is adjusted in real-time based on the current system state, including resource load conditions and detected virus threats. When a virus threat is detected, the system dynamically increases the collection priority of log messages even under high resource load, ensuring that critical virus countermeasure information is captured. This dynamic adjustment resolves the contradiction by adapting collection behavior to current conditions, preserving bandwidth during normal operation while ensuring complete virus detection when threats are present.
3Reliability
If all log messages are collected regardless of network status, then complete virus detection is achieved, but normal control messages experience congestion and delays
Solution Approach 1:
The patent applies parameter changes by modifying the collection parameter (collection priority) of log messages based on network status and message importance. Instead of collecting all log messages uniformly, the system changes the collection parameter dynamically: high-priority log messages are collected with high priority to ensure virus detection accuracy, while low-priority log messages are collected with low priority or skipped to prevent control message congestion and delays. This parameter-based selective collection resolves the contradiction by adjusting collection behavior according to message characteristics and system conditions.
Data Source
AI summary
Efficient virus detection and removal are realized by changing a mode of collecting logs in accordance with a network usage status. A configuration includes a processing monitoring unit that executes processing of monitoring a data communication network, and the processing monitoring unit includes a system load monitoring unit that monitors an available bandwidth of a network and a virus monitoring unit that collects log information corresponding to a communication message and performs virus detection. The virus monitoring unit changes a mode of collecting log information in accordance with information regarding the available bandwidth of the network acquired by the system load monitoring unit. In a case where a virus is detected and the available bandwidth is neither equal to nor larger than a predetermined threshold, only limited log information corresponding to a high-priority communication message is collected.


