Bus Line Illegitimate Operation Detection via Waveform Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing techniques for detecting illegitimate operations on a bus line, such as CAN networks, incorrectly identify legitimate device additions or removals as illegitimate activity, leading to false positives.

Innovation Solution

An information processing apparatus with a waveform analysis unit, device authentication unit, and illegitimate operation determination unit that analyzes voltage waveforms and performs authentication to accurately distinguish between legitimate and illegitimate device connections on a bus line.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication is performed for all devices on the bus line, then security against illegitimate devices is improved, but false detection of legitimate device changes as illegitimate operations increases

Engineering Contradiction:
ImprovesecurityVSAvoiddetection accuracy
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The system performs preliminary registration of legitimate devices and their authentication information before actual operation. When a device is newly connected, the system checks whether it is registered in advance. This preliminary registration action allows the system to distinguish between legitimate devices (which are pre-registered) and illegitimate devices (which are not), thereby reducing false detections while maintaining security.

Inventive Principle:
Principle #10Preliminary action

2Measurement precision

If voltage waveform monitoring is continuously performed, then detection of illegitimate operations is improved, but energy consumption and system complexity increase

Engineering Contradiction:
Improvedetection capabilityVSAvoidenergy consumption
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

Instead of continuous monitoring, the system performs voltage waveform monitoring periodically or event-triggered. Specifically, monitoring is activated when voltage changes are detected or at predetermined intervals, rather than continuously. This periodic approach maintains detection capability while significantly reducing energy consumption compared to continuous monitoring.

Inventive Principle:
Principle #19Periodic action

3Reliability

If authentication information is stored for all devices, then ability to verify device legitimacy is improved, but device complexity and information storage requirements increase

Engineering Contradiction:
Improveverification capabilityVSAvoidinformation storage
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts and stores only essential authentication information (such as device IDs and authentication keys) for legitimate devices in a registration table, rather than storing complete device configurations or all possible device information. This extraction of critical authentication data maintains verification capability while minimizing storage requirements and device complexity.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12113782B2Information processing apparatus, information processing method and computer readable medium
Publication Date: 2024.10.08 MITSUBISHI ELECTRIC CORP
  • US12113782B2 patent drawing
  • US12113782B2 patent drawing
  • US12113782B2 patent drawing

AI summary

A waveform analysis unit (102) analyzes a waveform obtained by measuring one of a voltage value and an impedance value of a bus line (300). A device authentication unit (104) determines whether a new device is connected to the bus line, the new device being a device not included in configuration information (1070) which includes one or more devices known to be connected to the bus line, performs authentication for each of the devices connected to the bus line, and when the new device is connected to the bus line, acquires authentication information used for the authentication for the new device, and performs the authentication for the new device. An illegitimate operation determination unit (105) determines whether or not illegitimate operation is performed on the bus line, by using the configuration information, an analysis result from the waveform analysis unit, and an authentication result from the device authentication unit.