Vehicle Body Controller Diagnostic Port Lockout Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing diagnostic port systems for vehicles lack effective protection mechanisms to prevent unauthorized access to the body control module when the vehicle perimeter alarm is armed, leading to potential security breaches and unauthorized diagnostic sessions.
Innovation Solution
Implementing a diagnostic port protection mode that monitors the vehicle bus for requests from scan devices, resets a lockout timeout, and allows access only during a predetermined access window after the timeout expires, with alerts such as horn chirps and light flashes to inform users of the access window.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If diagnostic port access is completely open for scan devices, then diagnostic functionality and ease of operation are improved, but security and protection against unauthorized access deteriorate
Solution Approach 1:
The system dynamically changes the state of diagnostic port access based on security conditions. When the alarm system is armed, the body control module transitions to a protected state that blocks scan device access. When disarmed, normal diagnostic access is restored. This dynamic state change resolves the contradiction by making the system secure when needed while maintaining ease of operation when safe.
Solution Approach 2:
The body control module acts as an intermediary between the scan device and the vehicle's diagnostic systems. It intercepts session requests from scan devices and mediates access based on alarm status. This intermediary function allows the system to maintain open diagnostic ports for legitimate use while blocking unauthorized access attempts, resolving the security vs. accessibility contradiction.
2Reliability
If diagnostic access is blocked when alarm is armed, then security is improved, but diagnostic functionality and ease of operation worsen
Solution Approach 1:
The system applies different access control qualities to different operational states. When the alarm is armed, the diagnostic port has a protected quality that blocks scan device sessions. When disarmed, it transitions to an open quality allowing full diagnostic access. This local quality application resolves the contradiction by making the port secure only when the vehicle requires protection, not during normal operation.
Solution Approach 2:
The system changes the access parameter of the diagnostic port based on the alarm state. The port transitions between a blocked state (when alarm is armed) and an open state (when disarmed). This parameter change allows the system to maintain security during armed periods while ensuring full diagnostic functionality during normal periods, resolving the contradiction between security and accessibility.
3Reliability
If lockout timeout is extended for longer protection, then security against unauthorized access is improved, but time required for legitimate diagnostic access increases
Solution Approach 1:
The system uses periodic action through the access window mechanism. After a lockout period, the system opens a brief access window that allows scan devices to establish sessions. This periodic opening of access provides continuous security while allowing legitimate diagnostic work to proceed in intervals, resolving the contradiction between protection duration and access speed.
Solution Approach 2:
The access window mechanism allows legitimate diagnostic sessions to rush through the lockout period by providing a brief but sufficient time window for session establishment. Once the session is established during the access window, the diagnostic work can proceed without further delays. This skipping mechanism resolves the contradiction by allowing security delays to be overcome quickly once the access window opens.
Data Source
AI summary
A body controller may monitor a vehicle bus for diagnostic requests received from a scan device connected to a diagnostic port when a vehicle perimeter alarm of a body controller is armed. The body controller may reset a predetermined lockout timeout responsive to receipt of a session request from the scan device. Upon expiration of the lockout timeout, the body controller may request to establish the session with the body controller from the scan device for a predetermined access timeout. When the session is established, the body controller may allow a user to program entry devices to the body controller and/or download software updates to the body controller.